I have to do some work on several computers that are infected with assortments of malware and spyware. I will need them to have acccess to the internet, but naturally don't want them <ehem> "interacting" with the other computers on my network.

Can I partition these computers off with two simple rules of the sort:

BLOCK if source is <IP of infected PC> and destination is LAN

BLOCK if source is <IP of infected PC> and destination is WLAN

Or might I need to do more than that?

You cannot create a block rule inside your LAN.

If your WLAN is not bridged to the LAN, or is bridged and you enable the firewall between members then you can block the traffic.

Thanks Ido!

I was hoping the rules I proposed would do the trick as they "seem" to provide the correct logic for what I want to do, but I can understand that this is not a feature many people would use ;-)

If you need this feature, you might want to purchase a Safe@Office with PowerPack, it allows you the use of Port Based VLANS which allow you to separate each computer to a different subnet (or bridge them all together to a single subnet, and maintain the firewall between members option)

Thank you Ido!
It is VERY GOOD to have you here on the forum!!!!