Yeah not finding a way to update that dropdown from allow to deny for traffic to Local LAN.  The best i came up for was to add three seperate rules for each of the private class subnets.  Hope this won't block the gateway for the client.   rules=[{'comment': 'Wireless clients accessing LAN', 'ipVer': 'ipv4', 'policy': 'deny', 'protocol': 'any', 'destPort': 'Any', 'destCidr': '10.0.0.0/8'}, {'comment': 'Wireless clients accessing LAN', 'ipVer': 'ipv4', 'policy': 'deny', 'protocol': 'any', 'destPort': 'Any', 'destCidr': '172.16.0.0/12'}, {'comment': 'Wireless clients accessing LAN', 'ipVer': 'ipv4', 'policy': 'deny', 'protocol': 'any', 'destPort': 'Any', 'destCidr': '192.168.0.0/16'}] ... View more

So for example, if you have a host 192.168.0.5 that needs to talk to the gateway 192.168.0.1/24, and your first outbound l3 firewall rule is that 192.168.0.5 is denied to 192.168.0.0/24, traffic will still go through because it's intra-vlan traffic, right?   ... View more

Thank you for the link.  I am just wondering if a host is able to talk to it's gateway IP address on the MX, if you deny all private IP addressing.   So for example, lets say you have a hosts on 192.168.0.0/24, with mx 192.168.0.1 and host is 192.168.0.5.   And you first firewall rule say 192.168.0.5 is denied to 192.168.0.0/24.  Will the host still be able to reach the gateway?  Thank you. ... View more

working again, maybe i had too many request, or there was an outage? ... View more