@Duez 

Thanks for reaching out. I understand that you want to know if you can block LAN port access for unknown MAC addresses on your Deco Mesh system.

Currently, Deco does not automatically block any devices, whether they are connected via Wi-Fi or LAN ports. You have full control over which devices are allowed or blocked on your network. If you notice any devices in the Block List within the Deco app, this action must have been performed manually by you or by someone else with management access to your Deco network.

To manage or block devices on your Deco network:
1. Only users with 'Manager' permissions can add devices to the Block List. If you want to restrict who can block devices, open the Deco app, go to MORE > Managers, and remove any unnecessary managers from your network.
2. For security, change your TP-Link ID password and enable two-factor authentication (2FA). You can find instructions here: https://www.tp-link.com/support/faq/3971/
3. Double-check the MAC addresses of any blocked devices and remove them from the Block List if needed.

Note: Deco does not provide a feature to automatically block unknown MAC addresses from accessing the LAN ports. All device blocking must be done manually through the Deco app.

If you need further assistance or want to know more about managing connected devices, feel free to ask!