Page 1 of 1

url blocking (through access restrictions) dont work!!

Posted: Wed Jul 23, 2014 10:22 am
by newbierampuse
the access restrictions (under firewall) dont work if u have keywords or websites to block. MAC addressess whitelist and blacklist WORK!!!
Thus the internet access can be restricted by MAC blocking but, website block doesnt work. read ALL forum topics, it seems other users are also having same issue.\

Please Help!!!

Re: url blocking (through access restrictions) dont work!!

Posted: Mon Aug 18, 2014 10:47 am
by Eric
My guess: you're trying to do url blocking on a site that uses SSL/https -- you can't match a url on an encrypted connection.

Re: url blocking (through access restrictions) dont work!!

Posted: Wed Aug 20, 2014 1:42 am
by newbierampuse
even non-ssl sites are not blocked. ANY website is not getting blocked!!!!

Re: url blocking (through access restrictions) dont work!!

Posted: Thu Aug 28, 2014 6:47 pm
by n0pin
Can you provide a screenshot of your restriction settings?

Re: url blocking (through access restrictions) dont work!!

Posted: Tue Sep 23, 2014 11:51 am
by sirazhudin@gmail.com
Hi, I have same problem. Restrictions/ url blocking do not work.
I have dir-825b1.

I used iptables rules from my other router with TomatoUSB and those worked. but I do want the rules on my gargoyle router to work.
Any body can help? will provide all the info I have

Serge

Re: url blocking (through access restrictions) dont work!!

Posted: Thu Oct 02, 2014 4:31 pm
by sirazhudin@gmail.com
Eric wrote:My guess: you're trying to do url blocking on a site that uses SSL/https -- you can't match a url on an encrypted connection.
Hi Eric, I did some testing and found that a blocking rule that blocks everything except .. works. I set up two rules: one blocks everything except urts with "face" and "mail" the other blocks only urls with "face" and "twit". Funny but first rule works:-) then I modified the second rule
from:
-A egress_restrictions -p tcp -m weburl --contains face -j CONNMARK --set-xmark 0x1000000/0x1000000
to:
"root@rt1:~# -A egress_restrictions -p tcp -m string --string twit --algo bm -j CONNMARK --set-xmark 0x1000000/0x1000000"
and it started working as well.
Yet, the question is why the rule "restrict all except ...." works?
These rules are very convenient for parents. I really need them to work.

I can provide more logs/info at request. Please let me know

Cheers,
Serge

Re: url blocking (through access restrictions) dont work!!

Posted: Sun Oct 19, 2014 5:39 am
by Cachorro
Hi,
I am looking now for a similar solution, and also get it to work on a schedule.

I want to only allow my children access to 'games' websites, for one hour everyday, say 6 to 7 PM; preferably, only applicable to their MACs.

A working solution would be great.

Regards./