url blocking (through access restrictions) dont work!!

[newbierampuse]

the access restrictions (under firewall) dont work if u have keywords or websites to block. MAC addressess whitelist and blacklist WORK!!!
Thus the internet access can be restricted by MAC blocking but, website block doesnt work. read ALL forum topics, it seems other users are also having same issue.\

Please Help!!!

[Eric]

My guess: you're trying to do url blocking on a site that uses SSL/https -- you can't match a url on an encrypted connection.

[newbierampuse]

even non-ssl sites are not blocked. ANY website is not getting blocked!!!!

[n0pin]

Can you provide a screenshot of your restriction settings?

[sirazhudin@gmail.com]

Hi, I have same problem. Restrictions/ url blocking do not work.
I have dir-825b1.

I used iptables rules from my other router with TomatoUSB and those worked. but I do want the rules on my gargoyle router to work.
Any body can help? will provide all the info I have

Serge

[sirazhudin@gmail.com]

My guess: you're trying to do url blocking on a site that uses SSL/https -- you can't match a url on an encrypted connection.

Hi Eric, I did some testing and found that a blocking rule that blocks everything except .. works. I set up two rules: one blocks everything except urts with "face" and "mail" the other blocks only urls with "face" and "twit". Funny but first rule works:-) then I modified the second rule
from:
-A egress_restrictions -p tcp -m weburl --contains face -j CONNMARK --set-xmark 0x1000000/0x1000000
to:
"root@rt1:~# -A egress_restrictions -p tcp -m string --string twit --algo bm -j CONNMARK --set-xmark 0x1000000/0x1000000"
and it started working as well.
Yet, the question is why the rule "restrict all except ...." works?
These rules are very convenient for parents. I really need them to work.

I can provide more logs/info at request. Please let me know

Cheers,
Serge

[Cachorro]

Hi,
I am looking now for a similar solution, and also get it to work on a schedule.

I want to only allow my children access to 'games' websites, for one hour everyday, say 6 to 7 PM; preferably, only applicable to their MACs.

A working solution would be great.

Regards./