Rules x deny scan private lan

[webstyler]

Hello

I have server with cpanel/WHM on board and 2 IP, 1 public and 1 private.

What need is to deny to user to ping private lan, because private lan must still to internal usage.

cpanel support reply us this:
"I see CSF Firewall is installed so you may want to look at adding specific port and destination rules in /etc/csf/csf.deny and /etc/csf/csf.allow."

Any idea ? I don't know if this is possible

Thanks

[lukapaunovic]

Go to WHM > ConfigServer Security & Firewall > Deny Server IPs and then select for which IP you want to block all external traffic, click Change.

[webstyler]

uhm..
I need that IP (ex. 192.168.3.128) could talk with other server on the same network BUT NOT if called by anynone inside /home/*

I cannot deny/block at all the IP or cannot talk with other server

Note. private IP and public IP is on 2 different network port

Thanks