Is there a way to apply banIP only to specific internal VLANs or zones, so that certain networks can completely bypass the filtering?
From what I understand, banIP listens on the WAN interface, so ultimately all traffic from internal networks is affected, regardless of which VLAN or zone it originates from. This makes it difficult to exclude specific internal networks from the filtering.
Ideally, I’d like to apply banIP only to certain zones (e.g., guest) while allowing others (e.g., trusted or lan) to pass through unfiltered — even though all traffic exits via the same WAN interface.
Has anyone successfully implemented this kind of selective filtering with banIP?
Any input or examples would be greatly appreciated.
Thanks!
Cheers
