linux – Raspberry Pi wireless AP with user internet restriction

I setup a Raspberry Pi connecting to my home router using the eth0 interface and broadcast a SSID via wlan0 interface simply by installing the RaspAP (

Everything working as expected.

However, I would like this newly created SSID only allow device to access a specific IP address (e.g. for my kids’ school web server).

I tried to configure the UFW rules

sudo ufw default deny outgoing

sudo ufw allow from to

I found that the rule only applies to the pi itself but the iPad can still access anywhere.

Any thoughts is welcome.