{
    return "" unless ( ($dansguardian{portblocking} || "no") eq 'yes');

    my $locals = "@locals";
    if (@locals)
    {
    $OUT .=<<"EOF";
    for network in $locals
    do
        /sbin/iptables -A \$NEW_local_chk -d $LocalIP -p tcp --destination-port $squid{TransparentPort} -j ACCEPT
        /sbin/iptables -A \$NEW_local_chk -s \$network -p tcp --destination-port $squid{TransparentPort} -j DROP
        /sbin/iptables -A \$NEW_local_chk -s \$network -p tcp --destination-port $squid{TCPPort} -j DROP
        /sbin/iptables -A \$NEW_local_chk -d \$network -p tcp --destination-port $squid{TCPPort} -j DROP
    done
EOF
    }
}
