@GRL it was cool that you can block the Gateway Management Page on the WAN interface too, I didn't know that. learn something new every day :-) This way I can also ensure that the VPN cannot connect...

@Domada basically everything should be blocked on the wan interface so it shouldn't be necessary to block anything, but i use wan local or internet local as it's called on unifi quite a lot to open...

@Domada There is something missing on the router ACL, wan/in does not work on the wan interface itself but from wan to lan, port NAT and things like that will be blocked from country. If I compare...

@GRL I have tested both and if something happens with the VPN it is impossible to fix it without doing a factory reset of the router and starting over. I agree that it is quite poorly thought out by...

@McDProp I was a bit quick now , this rule also blocks local lan, then you have to make a rule for each lan like this you can also do it on the gateway, same procedure, with gateway acl you will be...

@McDProp Goto EAP ACL