Restrictions with TL-WR1043ND

[widesreen]

Hi,

I'm using the TP-Link TL-WR1043ND and want to add restrictions for a single host. I want to allow browsing internet only, so I thought white listing port 80 was the best choice.

Restriction
block all traffic 192.186.0.10

White List
permit Local Port(s): 80

By applying these rules I cant access the Internet anymore.
Maybe there is a mistake?

[feardc]

I don't think that restrictions support ports, it only supports IP, IP ranges and MAC addresses, as I can see in my web interface. What version of Gargoyle are you using?

Also you said local port, that is a port number which is used on the local end of connection, what you need is remote port, a destination port number that connection is made to.

Also I think you should change 192.186.0.10 to 192.168.0.10.

You could easily set up a single iptables rule using SSH access, something like:

Code: Select all

iptables -I FORWARD 1 -p tcp -s 192.168.0.10 -m multiport --dports ! http,https -j DROP

Port "http" means 80. Second port "https", number 413, is for secured HTTP connections, when you use https:// prefix to connect to a website. Reason of using --insert instead of --append is to insert the rule at position before the other system defined rules, otherwise your rule will never get reached.