quick question how you would you make the firewall destination to block only internet but not the other subnets from the LAN_IN firewall rule?
Currently I have a LAN_IN rule that drops you if you access other subnets (guest network) and another drop rule if you are in the No internet group.