&gt;normally I block outbound RFC 1918 addresses<p>I&#x27;m assuming LAN traffic still works in this case.<p>&gt;That is a potential problem should some rogue program on my network attempt to exploit a modem vulnerability. Maybe I&#x27;ll just block all those addresses and only enable them in the firewall when I want to check the modem status.<p>I&#x27;ve been looking at scraping my modem interface for info and then blocking all but one PC from accessing the admin interface