Remote access - addresses

I have allow from 2 ip addresses
image

But it still allows any address to log in from. e.g. .192.168.0.25.

Where are these addresses stored?

I assume that you got confused between "Remote Access" and "Access" in general?
Those IPs should only work while accessed through WAN interface. So mostly they are for allowing specific public IPs to connect to the interface. But the IPs you set there are private and mostly connected via LAN instead of WAN?

I may be confused. yes

I want to limit access from private lan from specific addresses
or say block all from 192.168.1.1/24 and only allow
192.168.1.100 and 192.168.1.252

This isn't possible within the GL GUI.

You would need to adjust the firewall manually. I would not recommend it since it's not officially supported.

Thanks for your help

Could I use iptables from the shell?
I don't want to break or lock myself out from the router

I have similar on a raspberry pi
iptables -A INPUT -s 192.168.1.0/24 -j DROP
iptables -I INPUT -s 192.168.1.100 -j ACCEPT
iptables -I INPUT -s 192.168.1.252 -j ACCEPT