This is a new and really nice approach of how to handle your IOT devices with regard to Internet access. It defines a whitelist what kind of access to the Internet a device shall get. It is designed to run on OpenWrt. https://osmud.org/