No, zones are "seen" by the router. Well, not the zones on their own; you will make an additional VLAN and assign to it the LAN port that's connected to the PC you want to isolate, then you configure the firewall to block the traffic between the languest and lan.
A potentially simpler solution is to still use VLAN’s to create interfaces on each LAN port, put all interfaces into the same bridge, configure Netfilter to send all bridge traffic to Iptables, and then block cross-talk between the interfaces within the same bridge.
i wish there is a way to do this
here is my problem
i have 2 samsung printers k2200
they have various consumable chips like toner chip and drum chip
since they are connected in same network they communicate with each other
and share there consumable information
i have never thaught this would be possible but after checking indeed there is sharing of consumable
a toner chip is a read only eeprom when i introduce a new chip to a printer it will always believe its a new chip buy here coz they talk to one and another, i cant use a used toner chip from one printer add it to new printer coz they keep track of all the consumable on the network
so i am loosing chips fast at an alarming rate, it would be so good if i could just block them from talking to each other on the same network