host-based firewall

Should a host firewall deny everything except local network traffic?

I'm setting up a firewall for devices that use DHCP, so their addresses can change over time. I want different devices on my local network to reach different…