>Basically I want to deny ethertype 0800 (IPv4) packets for that LAN. > > Go on then, I'll bite. Why do you want to do this at all?