Firewall Setting: Block Lan Traffic to the Internet

I want to make VLAN2(192.168.42.0/24) no access to the Internet.

With the firewall setting as shown in below screenshot applied, VLAN2 had access to the Internet;

after changing “Zone In: LAN” to “Zone In: Any”, VLAN2 had no access to the Internet.

I want to know why below setting failed… Thank you.