Here is a newbie question for all.
What would be a good firewall rule to exclude a single static IP from the internet, but still maintain full LAN network functionality of said IP address?
Would a rule like
add chain=forward src-address="staicIPofPC" dst-address=!"LAN" action=reject
Also do i need to reverse the rule as well?