How to block access to OPNSense GUI

[warheat1990]

I have following Interfaces
Home (VLAN30) - 192.168.30.0/24
Surveillance (VLAN40) - 192.168.40.0/24

OPNSense IP are 192.168.30.1, 192.168.40.1, etc

I want to block Home network from accessing OPNSense GUI

I tried creating alias like this containing all OPNSense IP addresses



But this rule ended up blocking internet access altogether, what is the best way to block certain Interfaces from accessing OPNsense IP addresses without manually adding OPNsense address one by one for each interface?

[madj42]

You're blocking all traffic on every port to those IP addresses.  You most likely want to block just 22, 80, and 443 for a destination port.