How do I block internet (WAN) traffic (but not LAN traffic) to a specific device?

[User2703]

I have a IP Camera that I want to block all external access to, but continue to allow local LAN access too.

Any ideas?

QOS does not let you turn off access completely.

Thanks in advance

Andrew

[machare]

NAT will generally prevent remote access. Don't add any port forwarding to your router. 

You could also make the default gateway setting in the camera invalid.  Assign the camera a fixed IP address, i.e. don't use DHCP.