Restricting Access via Firewall to Exposed MetalLB IP

[Todd Wardzinski]

I'm messing around with MetalLB in my home lab (Layer 2).  I've got the LoadBalancer appropriately obtaining an address.  I can communicate with the exposed address and everything seems to function correctly without firewall enabled on worker nodes.  

I locked down the cluster via UFW and denied port 80, however, the exposed IP:80 continues to communicate.  Can anyone clarify the best process to restrict access to the IP locally within the cluster?