Can't seem to block MAC addresses in Access Restrictions?

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
pbc
DD-WRT Novice


Joined: 22 Jan 2014
Posts: 45

PostPosted: Thu Dec 03, 2020 22:26    Post subject: Can't seem to block MAC addresses in Access Restrictions? Reply with quote
Trying to shut off certain devices at 10pm each night (PS4's, etc). In the Access Restrictions page, I have enabled it, and created a new Policy Name.

- Selected "Any" for interface

- In the list of clients, inserted the MAC addresses I want to block (and triple checked them, and I also confirmed that the MAC address is "live" in the status page)

- Clicked the "Deny" button

- Clicked "Everyday" button

- Selected from 10pm to midnight (and double checked that the current time was correct)

Yet, 10pm hits, and nothing happens, the devices with the MAC addresses I have inserted continue to have internet access.

Am I missing something in the setup?
Sponsor
bushant
DD-WRT Guru


Joined: 18 Nov 2015
Posts: 2036

PostPosted: Thu Dec 03, 2020 22:43    Post subject: Reply with quote
Might be helpful to know what router, what build to know what your options might be?

As far as I know Access Restrictions still will not kill an existing connection.
Quite a lengthy discussion here:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=326794&highlight=

_________________
Forum Guide Lines (with helpful pointers about how to research your router, where and what firmware to download, where and how to post and many other helpful tips!)
How to get help the right way

Before asking for help - Read the forum guidelines AND Upgrade DD-WRT!
Adblock by eibgrad (1.1M blocked) + Blocklist Collection

pbc
DD-WRT Novice


Joined: 22 Jan 2014
Posts: 45

PostPosted: Thu Dec 03, 2020 23:12    Post subject: Reply with quote
Wow, that's unfortunate, defeats pretty much the whole purpose of the access restriction.

Has it always been this way?

I'm running an R7000 on 44627.
Wildlion
DD-WRT Guru


Joined: 24 May 2016
Posts: 1413

PostPosted: Thu Dec 03, 2020 23:21    Post subject: Reply with quote
Yes pretty much. It has to do with how iptables is setup because it is the connection table that would need to be cleared and then the other option of not wanting to restart a link.
bushant
DD-WRT Guru


Joined: 18 Nov 2015
Posts: 2036

PostPosted: Thu Dec 03, 2020 23:37    Post subject: Reply with quote
I would say there is a pretty good chance your router with that build could implement the solution referenced by @Alozaros in the thread I referenced. And the thread he referenced there.
pbc
DD-WRT Novice


Joined: 22 Jan 2014
Posts: 45

PostPosted: Fri Dec 04, 2020 0:58    Post subject: Reply with quote
Thanks, but I was hoping more for MAC blocking.

Does DD-WRT permit someone to block out a device individually, not based on a time? I.e., if I wanted to immediately access block a device that is connected and then reconnect it whenever, is there a simple way to do that that doesn't involve command lines?
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12877
Location: Netherlands

PostPosted: Fri Dec 04, 2020 8:00    Post subject: Reply with quote
Try the latest build 44863, there have been some work done on this subject maybe it works.
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
pbc
DD-WRT Novice


Joined: 22 Jan 2014
Posts: 45

PostPosted: Fri Dec 04, 2020 13:14    Post subject: Reply with quote
egc wrote:
Try the latest build 44863, there have been some work done on this subject maybe it works.


Thanks, will give it a go.

Is there a place in DD-WRT where one can easily just immediately block access to a device (as opposed to having to schedule on/off times) like most other default router software has? I can't seem to find it?
bushant
DD-WRT Guru


Joined: 18 Nov 2015
Posts: 2036

PostPosted: Fri Dec 04, 2020 15:07    Post subject: Reply with quote
egc wrote:
Try the latest build 44863, there have been some work done on this subject maybe it works.

Yep, just tested on R7800 44897A with phone by Mac Addy, SFE off.
It stayed connected but no internet access then regained access at the appointed time.

Now that I don't need it anymore Rolling Eyes
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum