[FIXED and ANSWERED] Disable Wireless GUI Access

Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions
Author Message
TheDropPolice
DD-WRT Novice


Joined: 13 Jun 2018
Posts: 3

PostPosted: Wed Jul 04, 2018 16:53    Post subject: [FIXED and ANSWERED] Disable Wireless GUI Access Reply with quote
This seems like a very basic security feature and there seems to be the option for it under Wireless > Wl0/1 Advanced, but changing this to disabled does not prevent access. I would like to only be able to administrate the router through a wired connection.

I am running r36247 on an optimum dlink dir868l.
Sponsor
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6411
Location: UK, London, just across the river..

PostPosted: Wed Jul 04, 2018 17:29    Post subject: Reply with quote
yep currently there is a mess with microserver (GUI)
GUI port 80 is not interchangeable anymore, as well
there was an option to limit/allow GUI by mac address or local IP using iptables rules not working anymore...

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55179 WAP
TP-Link WR1043NDv2 -DD-WRT 55303 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55460 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55460 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55363 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14126
Location: Texas, USA

PostPosted: Thu Jul 05, 2018 6:01    Post subject: Reply with quote
There is an active ticket on this issue:

https://svn.dd-wrt.com/ticket/3544

I've added this thread and the above link on dslreports forum in the comments. I'm guessing there is a broken interface between the webGUI and the function in httpd (?)
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1899

PostPosted: Sun Nov 06, 2022 12:34    Post subject: Reply with quote
Fixed and available for all platforms in 10-11-2022-r50474 and newer releases, barring any regressions.

Cannot set Disable "Wireless GUI Access" (R7000)

#3544 closed (fixed) BUG: cannot disable wireless webUI access (Broadcom)

#5670 closed (fixed) Wireless GUI Access option does not exist in Advanced Wireless - TP-Link Archer C7 v2

_________________
"The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost

"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio

<fact>code knows no gender</fact>

This is me, knowing I've ruffled your feathers, and not giving a ****
Some people are still hard-headed.

--------------------------------------
Mac Pro (Mid 2012) - Two 2.4GHz 6-Core Intel Xeon E5645 processors 64GB 1333MHz DDR3 ECC SDRAM OpenSUSE Leap 15.5
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6411
Location: UK, London, just across the river..

PostPosted: Mon Nov 07, 2022 10:06    Post subject: Reply with quote
on the new builds, you can set microserver port to anything you want or use GUI option to disable WIFI access or use iptables rules to prevent general GUI access and permit only those you want...that is what i do... Cool
_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55179 WAP
TP-Link WR1043NDv2 -DD-WRT 55303 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55460 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55460 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55363 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
mwchang
DD-WRT Guru


Joined: 26 Mar 2013
Posts: 1855
Location: Hung Hom, Hong Kong

PostPosted: Mon Nov 07, 2022 11:59    Post subject: Re: [FIXED and ANSWERED] Disable Wireless GUI Access Reply with quote
TheDropPolice wrote:
This seems like a very basic security feature and there seems to be the option for it under Wireless > Wl0/1 Advanced, but changing this to disabled does not prevent access. I would like to only be able to administrate the router through a wired connection.

I am running r36247 on an optimum dlink dir868l.

Post the output of "ifconfig" and "nvram show | grep -E 'web_filter|isolat'"!
In my Asus RT-N18U, it's interface name problem... "eth1" rather than "wl0".

_________________
Router: Asus RT-N18U (rev. A1)

Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!

Facebook: https://www.facebook.com/changmanwai
Website: https://sites.google.com/site/changmw
SETI@Home profile: http://setiathome.berkeley.edu/view_profile.php?userid=211832
GitHub: https://github.com/changmw/changmw


Last edited by mwchang on Mon Nov 07, 2022 12:03; edited 1 time in total
mwchang
DD-WRT Guru


Joined: 26 Mar 2013
Posts: 1855
Location: Hung Hom, Hong Kong

PostPosted: Mon Nov 07, 2022 12:02    Post subject: Reply with quote
kernel-panic69 wrote:
There is an active ticket on this issue:

https://svn.dd-wrt.com/ticket/3544

I've added this thread and the above link on dslreports forum in the comments. I'm guessing there is a broken interface between the webGUI and the function in httpd (?)

Solved for me! Not sure about other Broadcom routers.... Smile

DD-WRT :: View topic - [SOLVED-FIXED]Disable Wireless Access To WebUI not working
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=330081

Most important change is in reply https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=330081&start=49 !

I think BrainSlayer adopted a new method do the web_filter thing, which should cover all wireless interface names.... I haven't yet searched the source codes. Smile

_________________
Router: Asus RT-N18U (rev. A1)

Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!

Facebook: https://www.facebook.com/changmanwai
Website: https://sites.google.com/site/changmw
SETI@Home profile: http://setiathome.berkeley.edu/view_profile.php?userid=211832
GitHub: https://github.com/changmw/changmw
davejjj
DD-WRT Novice


Joined: 03 Jan 2023
Posts: 5

PostPosted: Wed Jan 04, 2023 20:05    Post subject: Reply with quote
So as of Jan 2023 is this supposed to be fixed or not?

Let me summarize/clarify...

Administration>Management tab
"Remote Access" control group
There is a "Web UI Management" radio button.

What does it do?


(I am using WRT3200acm v3.0-r51140)
d00zah
DD-WRT User


Joined: 06 Jun 2006
Posts: 210

PostPosted: Wed Jan 04, 2023 21:04    Post subject: Reply with quote
davejjj wrote:
So as of Jan 2023 is this supposed to be fixed or not?

Let me summarize/clarify...

Administration>Management tab
"Remote Access" control group
There is a "Web UI Management" radio button.

What does it do?


(I am using WRT3200acm v3.0-r51140)


That disables GUI access from the WAN (outside world, hence "Remote").

This topic appears to apply to the setting:

Wireless tab > Basic Settings tab > Wireless Interface wlanx [y GHz/802.11z] (any) > Advanced settings > Web UI Access

IF I read correctly?

& according to dale_gribble39 a few posts back...

PostPosted: Sun Nov 06, 2022 7:34 am    Post subject:
Fixed and available for all platforms in 10-11-2022-r50474 and newer releases, barring any regressions.

That said, works for me.

_________________
NetGear XR500 - FW Version: DD-WRT v3.0-r55460 std (03/25/24)
Linux 6.1.82 #116 SMP Mon Mar 18 01:32:27 +07 2024 armv7l
Updated from: DD-WRT v3.0-r55052 std (02/02/24) via GUI (FF), NO reset
Gateway: SmartDNS, DDNS (FreeDNS), QoS, IPv4 DHCP, Static leases
AP: 2.4GHz NG-Mixed 40MHz, 5GHz AC/N-Mixed 80MHz, WPA2 w/ AES, MAC filtering, Isolated Guest VAP on wlan1, Vanilla FW
davejjj
DD-WRT Novice


Joined: 03 Jan 2023
Posts: 5

PostPosted: Wed Jan 04, 2023 21:36    Post subject: Reply with quote
d00zah wrote:

This topic appears to apply to the setting:

Wireless tab > Basic Settings tab > Wireless Interface wlanx [y GHz/802.11z] (any) > Advanced settings > Web UI Access

IF I read correctly?


Oh, with the "Advanced Settings" checkbox checked I see it now. Thanks!
d00zah
DD-WRT User


Joined: 06 Jun 2006
Posts: 210

PostPosted: Wed Jan 04, 2023 22:06    Post subject: Reply with quote
davejjj wrote:

Oh, with the "Advanced Settings" checkbox checked I see it now. Thanks!


No worries. Many features buried in there.

_________________
NetGear XR500 - FW Version: DD-WRT v3.0-r55460 std (03/25/24)
Linux 6.1.82 #116 SMP Mon Mar 18 01:32:27 +07 2024 armv7l
Updated from: DD-WRT v3.0-r55052 std (02/02/24) via GUI (FF), NO reset
Gateway: SmartDNS, DDNS (FreeDNS), QoS, IPv4 DHCP, Static leases
AP: 2.4GHz NG-Mixed 40MHz, 5GHz AC/N-Mixed 80MHz, WPA2 w/ AES, MAC filtering, Isolated Guest VAP on wlan1, Vanilla FW
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum