*** I know this could be done through the Access Restrictions page, but this is not what I'm asking *** Could someone please show me the iptables rules that could block all Internet access for one device while still allowing LAN access? I want to block all TCP and UDP incoming and outgoing packets for that device. Can it be done by MAC address or do I need to assign a static IP to the device to be blocked? I'm running Thibor15c with a standard WAN/LAN configuration, nothing special. Thank you for your help.