I can block PORT outgoing to/incoming from the INTERNET. But for local network, all PCs can freely connect together and bypass all iptables's rules. How can I control the traffic inside Local Network? Look like they're direct connect to each other. Thanks so much for advice ps. Local PCs are both connected by wire and wireless.