Deny everything, Permit only private address range, specifically the subnet the device is on.
One potential solution is to use an old phone and keep accounts/apps that you HAVE to deal with solely on that device. Dont use the device for anything else. Use it only on wifi. Keep it at home.
Hey guys, since early this year i've started self hosting. I started by setting up my own router. Its been nice so far. Although I've recently ran into a problem. Perhaps someone with more experience can point me in the right direction. In an attempt to prevent vlan client from accessing the internet, restricting them to only reserved addresses im coming up short. I've been able to do perform this for clients not using a vlan but when i apply the rule to a single vlan client, it appears to break the network. Any help would be much appreciated. --Cheers!!