Thank you for the response.
I saw the option and that works for my purpose, but was curious about modifying the installer to accomodate private networks with greater granularity.
If I'm on a 192.168.0/24 it would be nice to still block the rest of that /16 as well as 172.16/12 and 10/8. I see no method in the ZTL admin panel to define these blocks for exclusion or to create specific drop rules either by service or address.
As I said in my previous post, we drop these packets at the router anyway, so for this network, it's unneccessary. I'm just curious.