Windows firewall: allow communication within subnet only

[NeghVar]

Is there a way to make a rule for windows firewall which will allow a program to communicate within a LAN but not outside the subnet? Basically forbidding internet communication but allowing LAN communication

 

[tporter]

Yes, just create a rule with just the local subnet in scope BUUUUT why do that when you can just remove the gateway (if the ip is set static)

 

[NeghVar]

Yes, just create a rule with just the local subnet in scope BUUUUT why do that when you can just remove the gateway (if the ip is set static)

Would this setting limit the application to LAN only

 

[mac1]

You can also create new Deny rule for particular program and only mark public network:

Also anytime you want to specify subnet in the rule you can do it by:

if your ip address is 192.168.0.x and subnet mask is 255.255.255.0