root@GL-AR750S:~# cat /etc/config/gl_firewall
config access
option name ‘vpn_lan’
option src_device ‘tun-SERVER’
option dest_network ‘lan’
option action ‘DROP’
config access
option name ‘vpn_input’
option src_device ‘tun-SERVER’
option action ‘DROP’
config access
option name ‘mac_block’
option src_network ‘lan’
option dest_network ‘wan’
list dest_device ‘wg0’
list dest_device ‘tun0’
list dest_device ‘tap0’
list src_device ‘br-guest’
option forward ‘DROP’
list mac ‘50:ec:50:2…’
config access ‘block_mac’
option name ‘mac_block’
list mac '50:ec:50:…’
list mac '90:3c:92…’