Exclude a static IP from the internet.

RouterOS Beginner Basics
1

Here is a newbie question for all. :smiley:

What would be a good firewall rule to exclude a single static IP from the internet, but still maintain full LAN network functionality of said IP address?

Would a rule like
add chain=forward src-address=“staicIPofPC” dst-address=!“LAN” action=reject
be correct?

Also do i need to reverse the rule as well?

Regards.

2

Why not simpler
/ip firewall
add chain=forward, action=drop, src-address=thatofyourpc, out-interface=wan

3

Actually I would prefer the reject over drop. as this will prevent timeouts on the device in question. Applications will be notified about lack of connectivity