Have you tried it yet? Looking at the MR firewall, so long as you put a default deny at the bottom of your added rules, it should act the same. If you want to allow LAN access, you'll need to make an explicit rule for that above your default deny. Allow/deny LAN access winds up below any custom rules you create.
... View more