Block Camera from Internet

[oznet]

I have 2 TP Link cameras and do not want them talk to the TP Link servers. So I need to block these but still allow my OpenVPN to access them with out doing a vlan for them to sit on.

My guess is I need 2 steps

1. Block the IP of the camera from the Wan?
2. In the VPN allow access to the camera IP?

Does this make sense?

[AndyRH]

Allow the camera to the VPN on LAN.
Block the camera to the internet on LAN.

Blocking on the WAN interface will not help.

[oznet]

@AndyRH If I block it from the lan then wont i have lost it locally?

[AndyRH]

@oznet Local traffic (same subnet) does not go to the firewall. If you have other networks then you would need to allow them as well.