diff --git a/config.xml b/config.xml
index aaa5f84..524e7e0 100644
--- a/config.xml
+++ b/config.xml
@@ -434,7 +434,7 @@
     </outbound>
   </nat>
   <filter>
-    <rule>
+    <rule uuid="d95bec34-aceb-43d7-8a9d-65edc759f106">
       <type>pass</type>
       <ipprotocol>inet</ipprotocol>
       <descr>Default allow LAN to any rule</descr>
@@ -446,7 +446,7 @@
         <any/>
       </destination>
     </rule>
-    <rule>
+    <rule uuid="146f8cd9-2063-4b25-afac-72317d7d1c3b">
       <type>pass</type>
       <ipprotocol>inet6</ipprotocol>
       <descr>Default allow LAN IPv6 to any rule</descr>
@@ -458,6 +458,33 @@
         <any/>
       </destination>
     </rule>
+    <rule uuid="8e3560e6-a404-4871-8d95-bd3109598b54">
+      <type>pass</type>
+      <interface>opt1</interface>
+      <ipprotocol>inet46</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allow access from LandLab router LAN to the Internet and block access to everything else</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp/udp</protocol>
+      <source>
+        <address>LANDLAB</address>
+      </source>
+      <destination>
+        <address>PrivateNetworks</address>
+        <not>1</not>
+      </destination>
+      <updated>
+        <username>mshillam@192.168.1.10</username>
+        <time>1713867523.4808</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>mshillam@192.168.1.10</username>
+        <time>1713867523.4808</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
     <bypassstaticroutes>yes</bypassstaticroutes>
   </filter>
   <rrd>
@@ -517,8 +544,8 @@
   </widgets>
   <revision>
     <username>mshillam@192.168.1.10</username>
-    <description>/api/routing/settings/setGateway/94528dc3-b901-4800-867d-fbc2139671b7 made changes</description>
-    <time>1713866615.9603</time>
+    <time>1713867523.7104</time>
+    <description>/firewall_rules_edit.php made changes</description>
   </revision>
   <OPNsense>
     <wireguard>