UNC AND DUKE ? MORE LIKE UNPEE AND PUKE . DON ' T TRY TOO HARD ULETANGISLIFE , THEY ' LL KNOW YOU ' RE A FRAUD <| sep |> Imagine that they have to set their housewife dolls ready for when they come home . <| sep |> You ' re progress will always be saved <| sep |> why should I ? What positive values does Putin represent for you ? <| sep |> I think the WANIN and WANLOCAL default action is Drop , with allow establish and drop invalid rules . That should mostly cover you , from what I ' ve read . There are other rulesets that you can add to reduce denial of servicefloods , as well as all sorts of outgoing stuff , but the basics stuff is there already . EDIT I think I use the same basic config and my 2 networks can talk to each other . May want to check your routing tablesfirewall rules to make sure if you want them totally isolated form each other .