Are you talking about a WAN going into a LAN? Like blocking ports of your LAN from being accessed by the WAN?