Wiregaurd - Access to internet only?

[jj_uk]

Previously, using OpenVPN, a connected client could only access the internet, and not any lan addresses.

This allowed for phones to connect back to my home network for internet access only; as my router dns is pointing to pihole, it allowed 4G/5G phones to have adblocking when not connected to my home wifi.

 

I'm trying to reproduce this with wiregaurd, but I can't figure it out.   I can connect, but I still have access to all LAN addresses.

 

How can I block access to LAN addresses?

[ljm42]

Completely blocking access to the LAN is not one of the built-in use cases:  

 

But on the Settings -> VPN Manager page, switch from Basic to Advanced view. Turn on the help and read about the Local Tunnel Firewall.

 

This is not a feature I have used, but it might work for your use case.