Disable WIREGUARD clients from local LAN

edit: just tested the rule mentioned above

add action=drop chain=forward dst-address=xxx.xxx.xxx.xxx dst-port=443 protocol=udp src-address=192.168.11.0/24

and it does work…
Is the order of the rules in your firewall correct?