<![CDATA[blocking two LAN's but enable a pass from some IPs from LAN to LAN]]>I have 2 LAN's
PUBLICLAN 192.168.88.1
LAN 192.168.1.1
both route have internet access

PUBLICLAN cannot talk to LAN with this rule that is in PUBLICLAN.

Screen Shot 2024-01-15 at 11.27.53 AM.png

Let's say I want to let pass 192.168.88.39 into LAN net 192.168.1.1. Should I add this new rule in PUBLICLAN ? like below..

Screen Shot 2024-01-15 at 11.30.16 AM.png

and the reason being for this is because PUBLICLAN is what holds the block rule, so I put this rule on top of this to enable the specific IP to pass, right?

Thanks for your advice.

]]>https://forum.netgate.com/topic/185553/blocking-two-lan-s-but-enable-a-pass-from-some-ips-from-lan-to-lanRSS for NodeFri, 12 Jun 2026 15:07:28 GMTMon, 15 Jan 2024 16:32:03 GMT60<![CDATA[Reply to blocking two LAN's but enable a pass from some IPs from LAN to LAN on Mon, 15 Jan 2024 17:04:00 GMT]]>Yes that will pass TCP traffic from 192.168.88.39 to any device in the LAN subnet.

]]>https://forum.netgate.com/post/1147972https://forum.netgate.com/post/1147972Mon, 15 Jan 2024 17:04:00 GMT