I just allow all hosts on the subnet, and I have used CIDR x.x.x.x/y. My router keeps the internet out. John