# Update the filter rules with VPN address and LUI
/ip firewall filter
add action=reject chain=forward comment=lvcloud_kill_list_external_<VPN IP> dst-address-list=lvcloud_kill_list_external_<VPN IP> reject-with=icmp-network-unreachable src-address-list=lvcloud_<LUI>
Notice the new address lists for each profile. This will enable us to tag the sources by adding the appropriate networks pools in the address lists.