I would like to create a few rules for local networks ( LAN and WLAN). The point of this rules do not exposed this services ports to WAN, only use in local network. Where is better to do this, for example in floating rules or dedicated interfaces, I'm in doubt?