Restrict WAN access

[TT7]

I need to block access to WAN from couple of computers on my network.
Computers must be completely isolated from accessing WAN by all means and they must remain accessible on the LAN.
I'm currently using firewall Network Service Filter to block "TCP ALL" and "UDP" protocols.

Should I be using any other filters/protocols? What is the best way to achieve this?

ASUS RT-N66U, Asuswrt-Merlin 3.0.0.4.270.26

Thank you

 

[zboq]

Go to router web page, then parental control and turn it on. After that just enter client name and mac address or choose from list. By default every device should be blocked from accessing WAN but You can click on time management just to make sure . That's what I do with my ps3.

 

[thelonelycoder]

That should block them. Except you have skilled teenagers...

 

[TT7]

Thank you for advice. I don't have teenagers so there is no risk someone will hack router.

I don't need to block HTTP only.
I need to block any other type of WAN access (FTP, Telnet, SFTP, NNTP,...)