It would be awesome to be able to prevent certain ip addresses(specific hosts) from passing traffic through the gateway and limiting access to internal LAN only.   For example,  if I have a IP Camera,  I would like traffic to go to my local NVR but not allow the Camera to "phone home".  Similar idea for IoT devices