OPNsense Forum

English Forums => General Discussion => Topic started by: HatalaTitla48 on September 20, 2021, 06:40:46 pm

Title: Block IP address from local LAN network
Post by: HatalaTitla48 on September 20, 2021, 06:40:46 pm

Hello, Im unable to figure out howto simple block a single ip address from local lan. I have ip address 192.168.1.50 from local lan 192.168.1.0/24. On opnsense it represented by LAN interface. I just want to block this IP from accessing internet. With linux iptables it is simple  "iptables -A FORWARD -i LANiface -s 192.168.1.50 -o WANiface -j REJECT" and thats all. How do I do this on opnsense? Thx.

Title: Re: Block IP address from local LAN network
Post by: hushcoden on September 20, 2021, 06:52:08 pm

Create a firewall rule in the interface, i.e. this is how I block the PS4  8)

Title: Re: Block IP address from local LAN network
Post by: HatalaTitla48 on September 20, 2021, 07:34:35 pm

Hm, I has same config just with destination as WAN net and rule wasn work.
Anyway, thx for tip, it works with "any" as destinantion.