访问限制

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 03:22, 8 August 2010 (edit)
Hazy (Talk | contribs)
(过滤互联网端口范围)
← Previous diff
Revision as of 03:30, 8 August 2010 (edit) (undo)
Hazy (Talk | contribs)
m (过滤服务/URLs/关键词)
Next diff →
Line 23: Line 23:
==过滤服务/URLs/关键词== ==过滤服务/URLs/关键词==
-For more advanced content filtering try [[OpenDNS]]+更高级的内容过滤,请使用[[OpenDNS]]
-# Select an unused policy number (1-10) in the drop-down menu.+# 在下拉菜单中选择一个未使用的策略号 (1-10).
-# Enable your policy by setting ''Status'' to ''Enable''.+# '''状态'''设为'''启用''',启用你的策略。
-# Enter a name for your policy in the ''Policy Name'' field. <u>Ex.</u> "Filter Bittorrent"+# '''策略名'''中输入策略的名称。<u>例如</u> "过滤BT"
-# Click the ''Edit List of clients'' button.+# 点击'''编辑客户列表'''按钮。
-# On the ''List of clients'' screen, specify clients by IP address or MAC address. Enter the appropriate IP addresses into the ''IP'' fields. If you have a range of IP addresses to filter, complete the appropriate ''IP Range'' fields. Enter the appropriate MAC addresses into the ''MAC'' fields.+# '''客户列表'''页面,通过IP地址或MAC地址指定客户。在'''IP'''框中输入适当的IP地址。如果需要过滤一个IP地址段,在'''IP范围'''内输入适当的地址。在'''MAC'''框中输入适当的MAC地址。
-# Click the ''Save'' and ''Apply'' buttons to save your changes. Click the ''Close'' button to return to the ''Access Restrictions'' screen.+# 点击'''保存''''''应用'''按钮,保存所做的更改。点击'''关闭'''按钮回到'''访问限制'''页面。
# Click the radio button next to ''Filter'' Internet access for listed clients during selected days and hours. (Remember, many DD-WRT versions will have an "Allow" option, but it really means "Filter") # Click the radio button next to ''Filter'' Internet access for listed clients during selected days and hours. (Remember, many DD-WRT versions will have an "Allow" option, but it really means "Filter")
# Set the days when access will be filtered. Select ''Everyday'' or the appropriate days of the week. # Set the days when access will be filtered. Select ''Everyday'' or the appropriate days of the week.
Line 37: Line 37:
# Under ''Website Blocking by URL Address'', enter in the domain name(s) you wish to block (if any). # Under ''Website Blocking by URL Address'', enter in the domain name(s) you wish to block (if any).
# Under ''Website Blocking by Keyword'', enter the keywords you wish to block (if any). # Under ''Website Blocking by Keyword'', enter the keywords you wish to block (if any).
-# Click ''Save'' and ''Apply''.+# 点击'''保存''''''应用'''。
-# To create or edit additional policies, repeat the necessary steps above.+# 要创建或编辑其他策略,重复以上的必要步骤。
-'''Note:''' Filtering does not work if you don't enter a list of clients for that policy.+'''注意:''' 如果没有输入策略的客户列表,过滤将不起作用。
==删除== ==删除==

Revision as of 03:30, 8 August 2010

访问限制 允许用户按组创建规则,管理外网访问内网上的机器。规则可以按:个人 IP、MAC 物理地址、IP范围、 时间日期、流量类型、URL 或关键字 等创建,管理访问权限。

用户能创建多达10组规则,每组规则归类为一个策略一个策略能包含对个独立的规则,例如过滤个别机器访问特定网站,或者过滤一个确切的不想要的P2P协议。

Remember that all policies will be used (this is different than in factory Linksys firmware where only the first matched is used)! For example, if policy #1 is a Deny policy that restricts all internet access to a machine on your LAN, that machine will no longer be able to access the Internet, regardless of any Filter policies you might have. Note: The term "Filter" is erroneously labeled as "Allow" in earlier versions of DD-WRT firmware. This is the main source of confusion when dealing with access restrictions in DD-WRT. See Eko's forum post for more information.

The Filter option is used to block access to web sites, services, or keywords. However, it does not block internet altogether like the "Deny" option does. Nor does it allow internet access during times that a Deny policy denies it.

If you will notice, when you click the "Deny" button (instead of the Filter button), those extra options at the bottom of the page get greyed out (at least in newer dd-wrt versions). This is because filtering a web site, service, etc. in a Deny policy is pointless since the machines in the policy would be denied internet access anyway!

Contents

拒绝互联网访问

  1. 从下拉菜单的1-10之间选择一个还没有被使用的策略号;
  2. 通过将Status设置为Enable来使能你的策略;
  3. Policy Name栏内给你测策略输入一个名字,例如: Deny Internet (限制因特网访问)
  4. 点击Edit List of clients 按钮
  5. List of clients界面内, 指定客户端的IP地址或MAC 地址,在IP栏内输入相应的IP地址,如果你希望指定一个IP地址的范围给过滤器, 可以通过在IP Range栏填入相应内容来完成。你也可以在MAC栏输入相应的MAC地址来达到同样的目的;
  6. 通过分别点击SaveApply按钮来保存与应用你的设置。点击Close按钮来回到Access Restrictions界面;
  7. 点击Deny Internet access for listed clients during selected days and hours 旁边的单选按钮;
  8. 通过选择Everyday或一周内的哪几天来设置这些天因特网的访问将被限制;
  9. 通过选择24 Hours或选择From指定时间段来指定限制因特网访问的时间段;
  10. 分别点击SaveApply来保存和应用设置;
  11. 重复上面的步骤来建立或修改其他的策略;

过滤服务/URLs/关键词

更高级的内容过滤,请使用OpenDNS

  1. 在下拉菜单中选择一个未使用的策略号 (1-10).
  2. 状态设为启用,启用你的策略。
  3. 策略名中输入策略的名称。例如 "过滤BT"
  4. 点击编辑客户列表按钮。
  5. 客户列表页面,通过IP地址或MAC地址指定客户。在IP框中输入适当的IP地址。如果需要过滤一个IP地址段,在IP范围内输入适当的地址。在MAC框中输入适当的MAC地址。
  6. 点击保存应用按钮,保存所做的更改。点击关闭按钮回到访问限制页面。
  7. Click the radio button next to Filter Internet access for listed clients during selected days and hours. (Remember, many DD-WRT versions will have an "Allow" option, but it really means "Filter")
  8. Set the days when access will be filtered. Select Everyday or the appropriate days of the week.
  9. Set the time when access will be filtered. Select 24 Hours, or check the box next to From and use the drop-down boxes to designate a specific time period.
  10. Under Blocked Services, enter the services you wish to block (if any).
  11. Under Website Blocking by URL Address, enter in the domain name(s) you wish to block (if any).
  12. Under Website Blocking by Keyword, enter the keywords you wish to block (if any).
  13. 点击保存应用
  14. 要创建或编辑其他策略,重复以上的必要步骤。

注意: 如果没有输入策略的客户列表,过滤将不起作用。

删除

删除互联网访问策略,只要选择对应的策略号,然后点击“删除”即可。

摘要

要查看所有策略的摘要,请点击摘要按钮。互联网策略摘要页面将显示每个策略的编号、名称、日期和时间。要删除一个策略,点击它的复选框,然后点击删除按钮。点击关闭按钮可以回到过滤页面。

过滤互联网端口范围

要根据端口过滤计算机,根据你想过滤的协议选择TCP、UDP或两者。然后在端口号内输入你想过滤的端口。连接到路由器的计算机将无法访问列表呢的任何端口。要禁用一个过滤器,选择禁用。

Filtering Inbound Traffic

See Iptables.


问题?

还有关于访问限制的问题?你可能正在使用一个旧的不再维护的DD-WRT固件版本。如果是这样的话,查看本文章在讨论使用DD-WRT v24+之前的旧版本可能会有帮助。