Posted: Wed Jul 04, 2018 16:53 Post subject: [FIXED and ANSWERED] Disable Wireless GUI Access
This seems like a very basic security feature and there seems to be the option for it under Wireless > Wl0/1 Advanced, but changing this to disabled does not prevent access. I would like to only be able to administrate the router through a wired connection.
Joined: 16 Nov 2015 Posts: 6436 Location: UK, London, just across the river..
Posted: Wed Jul 04, 2018 17:29 Post subject:
yep currently there is a mess with microserver (GUI)
GUI port 80 is not interchangeable anymore, as well
there was an option to limit/allow GUI by mac address or local IP using iptables rules not working anymore... _________________ Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
I've added this thread and the above link on dslreports forum in the comments. I'm guessing there is a broken interface between the webGUI and the function in httpd (?)
Joined: 16 Nov 2015 Posts: 6436 Location: UK, London, just across the river..
Posted: Mon Nov 07, 2022 10:06 Post subject:
on the new builds, you can set microserver port to anything you want or use GUI option to disable WIFI access or use iptables rules to prevent general GUI access and permit only those you want...that is what i do... _________________ Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Joined: 26 Mar 2013 Posts: 1856 Location: Hung Hom, Hong Kong
Posted: Mon Nov 07, 2022 11:59 Post subject: Re: [FIXED and ANSWERED] Disable Wireless GUI Access
TheDropPolice wrote:
This seems like a very basic security feature and there seems to be the option for it under Wireless > Wl0/1 Advanced, but changing this to disabled does not prevent access. I would like to only be able to administrate the router through a wired connection.
I am running r36247 on an optimum dlink dir868l.
Post the output of "ifconfig" and "nvram show | grep -E 'web_filter|isolat'"!
In my Asus RT-N18U, it's interface name problem... "eth1" rather than "wl0". _________________ Router: Asus RT-N18U (rev. A1)
Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!
I've added this thread and the above link on dslreports forum in the comments. I'm guessing there is a broken interface between the webGUI and the function in httpd (?)
Solved for me! Not sure about other Broadcom routers....
I think BrainSlayer adopted a new method do the web_filter thing, which should cover all wireless interface names.... I haven't yet searched the source codes. _________________ Router: Asus RT-N18U (rev. A1)
Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!
PostPosted: Sun Nov 06, 2022 7:34 am Post subject:
Fixed and available for all platforms in 10-11-2022-r50474 and newer releases, barring any regressions.
That said, works for me. _________________ NetGear XR500 - FW Version: DD-WRT v3.0-r55819 std (04/17/24)
Linux 6.1.86 #130 SMP Wed Apr 17 05:48:30 +07 2024 armv7l
Updated from: DD-WRT v3.0-55779 std (04/12/24) via GUI (FF), NO reset
Gateway: SmartDNS, DDNS (FreeDNS), IPv4 DHCP, Static leases, SFE Disabled, QoS Disabled
AP: 2.4GHz NG-Mixed 40MHz, 5GHz AC/N-Mixed 80MHz, WPA2 w/ AES, MAC filtering, Isolated Guest VAP on wlan1, Vanilla FW
Services: USB Storage, NAS, Samba
Storage: Samsung Portable SSD T7 Shield USB 3.2 2TB, /jffs, /opt, /data (ext4)