Local IP block for Wan

RouterOS Beginner Basics
1

How to block local IPs adress to access internet but allow it to access local IPs. Share between local networks only?

2

Simply not masquerade anythig.

3

I need only 1 IP adress to block for internet rest not

4

Example if you want to block ip: 10.0.0.150 in 10.0.0.0/24 network

/ip firewall address-list
add address=10.0.0.1-10.0.0.149 disabled=no list=block
add address=10.0.0.151-10.0.0.254 disabled=no list=block




/ip firewall nat
add action=masquerade chain=srcnat disabled=no src-address-list=block
5

I advice to block via firewall filter rule.

6

Thanks. Have I keep default masquerade for my Wan or replace it with this one?

7

replace it with this one