Block PORT in local network

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Goto page Previous  1, 2
Author Message
lenovomen
DD-WRT Novice


Joined: 29 Jul 2022
Posts: 30

PostPosted: Sun Jul 31, 2022 12:33    Post subject: Reply with quote
I currently use an TP-Link TLWR 740n v4 router and DDWRT v 3.0-r49599 std version.

How can I add that ebtables module? Or do I need to buy another more advanced router? Which router should I buy that is the most compatible with my system and doesn't cost too much? Can it also run openWRT?
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14223
Location: Texas, USA

PostPosted: Sun Jul 31, 2022 17:41    Post subject: Reply with quote
That device has only 4MB flash space. Highly doubtful it has the kernel modules available for ebtables, but the output of ls /lib/modules/$(uname -r) | grep ebt will tell you for sure. Also, for multiport support, the output of ls /lib/modules/$(uname -r) | grep multiport will give you the answer. I see that in your other thread, you were given recommendation for XR500 or R7800. You may also have some success, depending on your requirements, with the Archer A7 v5.x.

https://wikidevi.wi-cat.ru/TP-LINK_TL-WR740N_v4.x

https://wikidevi.wi-cat.ru/TP-LINK_Archer_A7_v5.x

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
the-joker
DD-WRT Developer/Maintainer


Joined: 31 Jul 2021
Posts: 2146
Location: All over YOUR webs

PostPosted: Mon Aug 01, 2022 8:14    Post subject: Reply with quote
Apparently according to the device config it has CONFIG_EBTABLES=y
_________________
Saving your retinas from the burn!🔥
DD-WRT Inspired themes for routers
DD-WRT Inspired themes for the phpBB Forum
DD-WRT Inspired themes for the SVN Trac & FTP site
Join in for a chat @ #style_it_themes_public:matrix.org or #style_it_themes:discord

DD-WRT UI Themes Bug Reporting and Discussion thread

Router: ANus RT-AC68U E1 (recognized as C1)
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1939

PostPosted: Mon Aug 01, 2022 12:48    Post subject: Reply with quote
Which would mean that the firewall script would require the kernel modules to be inserted as part of the script:
Code:
insmod ebtables
insmod ebtable_filter
insmod ebtable_broute
insmod ebt_ip

Then add the ebtables rules. Of course, there is always this option as well that was posted today so that you don't run into a possible performance impact issue using ebtables:

EBTables VS BR_Netfilter

But this would have to be explored on proper iptables rules for accomplishing what the OPs premise is here. At this point, I am going to take a wild guess that we're trying to prevent anyone from accessing (wired or wireless?) IP cameras on anything but port 443.

_________________
"The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost

"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio

<fact>code knows no gender</fact>

This is me, knowing I've ruffled your feathers, and not giving a ****
Some people are still hard-headed.

--------------------------------------
Mac Pro (Mid 2012) - Two 2.4GHz 6-Core Intel Xeon E5645 processors 64GB 1333MHz DDR3 ECC SDRAM OpenSUSE Leap 15.5
Wildlion
DD-WRT Guru


Joined: 24 May 2016
Posts: 1415

PostPosted: Mon Aug 01, 2022 22:18    Post subject: Reply with quote
what I would do is just segment the camera on a different network like with a virtual ap and then block all traffic that way.
Goto page Previous  1, 2 Display posts from previous:    Page 2 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum