LAN to WAN or WAN to LAN for Internet Access?

[kuroteckie]

Good afternoon techies,

I'm configuring some rules on a firewall. I want hosts on my LAN to be able to communicate with one another but I want to restrict them from using the internet. I was thinking of maybe restricting LAN to WAN traffic for this but is WAN to LAN also a choice? What would be the difference between the two?

 

[hang-the-9]

Pretty simple, LAN to WAN is internal traffic blocked from going out, WAN to LAN would be external traffic being blocked from coming in.

 

[djett427]

LAN-WAN is traffic leaving your network, and WAN-LAN is traffic entering your network. Everything coming in from WAN-LAN should be blocked by default on your firewall, unless you have SSH or a VPN setup or something of the sort. If you want to block hosts from accessing the internet, you just need a rule that blocks LAN-WAN traffic.

Cheers!
-Drew