Hi,
Is there an app or script that can track blocked connections from lan to outbound?
For example if I decide to do a block on China / Russia addresses, is there a tool that can report if a device on LAN talks to it?
Have you considered the banIP package?
I didn't think banip did logging. I'll check it out again.
If you only need “did anything try to go there?”, banIP is the clean first place to check. For more detail, add logging to the specific reject/drop rule instead of logging the whole forward chain, otherwise the logs get noisy very fast. In LuCI that usually means Firewall → Traffic Rules, create/narrow the rule for the blocked destination set, enable logging, then watch the system log while one LAN client tests. I’d keep the log prefix unique so it is easy to grep later.