Block and/or Redirect one IP address, best way?

[trentdk]

There is an external IP address to which I don't want my LAN having access. Using 1.2.3, what is the easiest way to either block the IP, or redirect it to 127.0.0.1 ?

[GruensFroeschli]

Per default everything is blocked.
If you don't explicitly allow something it won't get in.

[danswartz]

I read it as he doesn't want the LAN hosts to get to that address, so he'd need to add an outbound rule before the default one to block it.

[GruensFroeschli]

Ah i see.
Well in this case i would create an alias containing all the IP's in don't want to allow.

Then use this alias in the default allow rule as:
Destination: !alias (allow everything except the alias)