[mhtrinh]

Hi,

I have PiHole installed on 192.168.1.20
The upstream DNS is the provider DNS.

Setup > Router IP > LocalDNS : 192.168.1.20
Services > Dnsmasq >Dnsmasq : Enable
Services > Dnsmasq > Additional Dnsmasq Options: dhcp-option=6,192.168.1.20

Everything work as expected. I can see all phones DNS request go through my DNS server on 192.168.1.20 and dropping ads server

I want to enable Access crontrol on a phone.
Access Restrictions > Policy > 1
Access Restrictions > PCs : tried fill the MAC only, fill the IP only, tried fill MAC and IP
Access Restrictions > Filter
Access Restrictions > Blocked services > http [dpi]

As soon as I enable the Policy : no more internet on All devices, including the local DNS server (no ping, even to 8.8.8.8), doesn't matter if the time match or not.

What did I missed ? I follow https://wiki.dd-wrt.com/wiki/index.php/Access_Restrictions

Even when enabling an empty policy : no more internet.
Is this have to do with the local DNS ?

Edit:
DD-WRT v3.0-r42287 std (02/06/20)
Netgear WNDR4300

[tedm]

Disclaimer - I don't use Access Restrictions

Have you seen this:

https://svn.dd-wrt.com//ticket/4942

My understanding is that for Access Restrictions to be any good you have to put in ALL devices and Allows for each device you DON'T want to filter. That is' when you turn it on the default is to block everything.

This prevents a child's friend from coming over to the house with their phone and surfing unrestricted

Most people I know with kids who want to restrict Internet usage buy a Circle box. They are pretty cheap.

I'm probably an old fart on this since what worked for us was just 2 wifi networks. One was for us the other was for the kids. We would unplug the kids one when we wanted them to do their homework.

[mhtrinh]

This feature looks a bit unstable IMHO ...
So I implement my own way, using a seperate linux box with dnsmasq and iptables

[kernel-panic69]

You need to be on a recent build, i.e. the next release: