This message was posted on slack and has been posted here for discoverability
It may have gone unnoticed, but NetBird now has a stateful firewall!
Previously, when selecting ALL protocols or ICMP, you couldn’t restrict traffic to just one direction, a pretty big limitation. E.g., meaning that Metabase could access Devs. 
Now, that’s no longer the case. 
Give it a try: