Looking to block all net access but allow all local and ports

[The-Maize]

How is this achieved in the optimal way i have a couple of programs like this i need these rules to stick too. i would like to ensure that they must not escape local addresses as this could breach my NDA agreements with my clients for the work I'm contracted to perform. I must allow software to communicate through the localhost to access the licensing server, But i need the software to not be able to communicate beyond that to any other external IP address, (all ports must be allowed though as the software packages communicate on various ports with each other).

I need the license server to access a specific set of remote IP addresses so they can receive the licenses from the software vendor i pay. but receive only the other addresses that are local (this can be a separate rule preferably)

What is the best method? and how is it implemented?

I did do a search but found some of the other examples to not match / or were a bit vague and due to the nature of the NDA's i work under, i dont want to make a mistake.

thanks in advance

[tnodir]

Loopback and LAN addresses are not filtered by default - see the Options: IP Addresses: Local Area Network: "Filter Local ..." flags.

If you are not behind a router or don't trust other devices on your LAN, then tick on the "Filter Local Network" flag.

[tnodir]

i need the software to not be able to communicate beyond that to any other external IP address

You can tick a program's "Block Internet Traffic" flag:

It'll block all IP addresses, excluding addresses from the Options: IP Addresses: Local Area Network: "Local Network Addresses" field:

You can clear this field, so all IP addresses will be treated as Internet addresses.

[tnodir]

You can create an Application Rule to block LAN and Internet addresses for desired programs:

[The-Maize]

Apologies for late reply, Thank you i will try all of that this week end. and see if i can get it to behave as expected thank you