I'm having trouble figuring this out. What I would like to do is block 1 local LAN IP address on my network (192.168.0.51) from accessing any other devices on the local LAN (192.168.0.1, 255.255.255.0). I do however want 192.168.0.51 to be able to access the internet fully, just not have any access to LAN resources at all. This client is wireless. I know I can enable AP Isolation, however I believe this setting affects all WLAN clients, and I just want this to be applied to this one client. I also prefer not to have to set up a VLAN to accomplish this, as I do want this client to be on the same LAN as the other devices, just not be able to access anything except WAN resources. I've been doing some research but I can't seem to find the best solution for this. I'm running Shibby's Tomato 1.28.RT5x v83v on an Asus RT-N16.