[lime-users] Protecting home LAN from LiMe network

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have my private home network connected to the Internet and then the LiMe network I am deploying. In order to let the LiMe network access the Internet, I connect the WAN port of a LiMe router to a switch port (LAN) of my private home router. And it just rocks, double NAT works, and routers spread the Internet all around the mesh. But now I am trying to deny any traffic from LiMe hosts (10.x.x.x) to my private home network (192.168.x.x). I have been playing with the LuCI web interface of my private home router but somehow I do not manage to restrict the undesired traffic. This is what I've tried: 1. I assign a static IPv4 address to the LiMe router (I did not manage do it with IPv6). 2. I create a traffic rule which DROPS ANY traffic coming from the statically assigned IPv4 address (192.168.A.A) of the connected LiMe router (which is in the LAN zone and with a defined source MAC address) with destination ANY LAN zone -so that they can access only the Internet (WAN). 3. I enable the rule and put it up to the top of the list Why can I still reach my home private router from the LiMe network? Is this "zone" thing working? How should I configure it? Please let me know. Either through the LuCI web interface or the command line -step by step, please. Thank you!