Way to restrict LAN access

General discussion about Gargoyle, OpenWrt or anything else even remotely related to the project

Moderator: Moderators

Post Reply
Scorpio65
Posts: 3
Joined: Mon Dec 07, 2009 8:23 am

Way to restrict LAN access

Post by Scorpio65 »

Is there any way in the Access Restrictions to limit LAN access for a specific IP address at pre-determined hours?

I've tried the "all" setting unsuccessfully...

Eric
Site Admin
Posts: 1443
Joined: Sat Jun 14, 2008 1:14 pm

Re: Way to restrict LAN access

Post by Eric »

It should work.... can you please 1) ensure your router time/time-zone is configured correctly and 2) specify the restrictions you are using in detail, so I can try replicating the issue?

If there's a problem, I want to track it down as soon as possible, but if I can't replicate the problem I can't fix it. So please provide as many details of your setup as possible. Thanks!

Scorpio65
Posts: 3
Joined: Mon Dec 07, 2009 8:23 am

Re: Way to restrict LAN access

Post by Scorpio65 »

Eric wrote:It should work.... can you please 1) ensure your router time/time-zone is configured correctly and 2) specify the restrictions you are using in detail, so I can try replicating the issue?
Hi Eric. Thanks for the speedy reply.

What I have done is set an access restriction for my media player (WDTV Live, IP 192.168.1.160, statically assigned). The restriction is for all network access, all day, every day. The time shouldn't matter should it? Although, living in Brisbane, Australia where they have this strange aversion to using daylight savings, the time zone is an hour out but I did allow for that when setting timed restrictions on internet access for other IP addresses (which all function perfectly).

I setup the "policy" and saved the settings. Do I need to reboot the router to get it to actually apply them?

I switched to Gargoyle from DD-WRT for the possibility of denying LAN access as I could find no way of doing it with DD-WRT through the GUI.

Thanks again for your attention.

Eric
Site Admin
Posts: 1443
Joined: Sat Jun 14, 2008 1:14 pm

Re: Way to restrict LAN access

Post by Eric »

I just tried, and I can't replicate the problem. Keep in mind that even after blocked the device with the specified IP should be able to access the LAN, just not the WAN/Internet.

Can you log in to the router using via ssh (use putty if you're using windows), and run the following command & post the output here:

Code: Select all

iptables -L

Scorpio65
Posts: 3
Joined: Mon Dec 07, 2009 8:23 am

Re: Way to restrict LAN access

Post by Scorpio65 »

Eric wrote:I just tried, and I can't replicate the problem. Keep in mind that even after blocked the device with the specified IP should be able to access the LAN, just not the WAN/Internet.

Can you log in to the router using via ssh (use putty if you're using windows), and run the following command & post the output here:

Code: Select all

iptables -L
Hi Eric.

Maybe you misread and Gargoyle can't do what I want afetr all. I don't want the device to be able to access the LAN (or WAN by definition). WAN blocking works perfectly. I want to restrict access to the local network (as the kids abuse the WDTV Live and stay up till all hours!).

Post Reply