ACLs (Network Rules) for Wireguard VPN

[Greyberry]

Is it possible to make a vpn network without access to the server itself (webinterface, dockers, etc.)?

only the clients should see each other + access to the standardgateway of unraid (internet).

 

and: when a wireguard-client is routing its traffic through the tunnel to the internet, does Unraid do NAT or is the wireguard ip address shown on the standardgateway?

[Greyberry]

ok, i just found out that there is a NAT and Firewall-Setting in the advanced view.

 

BUT: blocking the traffic to unraid itself (webinterface and dockers) is not working.