Security rules for ip addresses

It would be awesome to be able to prevent certain ip addresses(specific hosts) from passing traffic through the gateway and limiting access to internal LAN only.   For example,  if I have a IP Camera,  I would like traffic to go to my local NVR but not allow the Camera to "phone home".  Similar idea for IoT devices