How to block apps from connecting to internet

I’m running TrueNAS Scale 25.04.2.1.

I want my TrueNAS system to connect to the internet for downloading apps and updates, but I do not want some of my apps to be able to connect to the internet (or really, anything outside its container).

I’ve read a number of forum posts discussing the issue, but haven’t seen a straightforward solution to this. I’ve considered blocking traffic via firewall rules, but I don’t see any way to differentiate between TrueNAS traffic I want (e.g. downloading updates) from traffic I don’t want (e.g. traffic from apps that don’t need internet access).

Any ideas would be greatly appreciated.

The only solution at this point, AFAIK, is to run your apps (at least those you don’t want to access the Internet) in a VM.

1 Like