Instead of refusing extern from Lille, just set the firewall for the local actions