Block access

[JoK]

Well....I tried to put my ipad's IP address in the Alias to test this, and its still online, what the fudge am i doing wrong

I did it EXACLY like on your pictures, except i choose "LAN net" in stead of your "ALL_LAN"

[lar.hed]

ALL_LAN = my "LAN" interface, and 3 more interfaces that all represents the "inside" interfaces, grouped together. Easier to handla so to speak.

I hope you selected Destination/invert - and not source/invert. Double check - it is very easy to miss the small details :-( I know that for a fact. Anyway, if you "Destination/invert" is like "not" (notice the small "!" before All_LAN net" on the "Interface.jpg". So double check that your rule is identical except "LAN net" instead of "All_LAN net", including the "!".

Or to copy someone else:

LAN Interface inbound
Source -> Device IP
Destination -> Invert LAN
Protocol -> ANY
Action -> Block/Drop

[JoK]

A screenshot, it should be almost identical to yours, except the name

[JoK]

one more

[lar.hed]

You need to move the block rule BEFORE the first ip4 rule...

[JoK]

Like this?

[JoK]

Weeee..its now working, thank you SOOOOO much for your kind help and patience :-)