Some help with a firewall rule

[fcapizzo]

I have a list of internet IPs that I want blocked in 2 ways; I don't their packets getting in, and if one of my LAN clients tries to connect to one of those IPs I want that traffic stopped as well.

With that in mind, I'm a bit confused on creating a rule or rules to define the block.  First I created an alias with the list of IPs.  Here's what I have so far for rules:

Reject on LAN any source to alias list of IPs.
Reject on WAN alias list of IPs to any source.

Is this correct?  Also, by selecting any protocol will that stop all types of traffic, including web, P2P, ftp, etc.?

[GruensFroeschli]

make sure your block rule is above every other rule.
but your rule look good.
block, LAN:  source: any  ; destination: alias
block, WAN: source: alias ; destination: any

if you have any as protocoll you make sure that nothing goes through. though most p2p programms use TCP or UDP.

[fcapizzo]

Great.  Looks like I got the rules correct.  Thank you!