访问限制

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 20:58, 9 February 2009 (edit)
Jjj206 (Talk | contribs)
m
← Previous diff
Revision as of 21:00, 9 February 2009 (edit) (undo)
Jjj206 (Talk | contribs)
m (删除)
Next diff →
Line 43: Line 43:
==删除== ==删除==
-删除互联网访问策略,选择策略号点击“删除”即可。+删除互联网访问策略,只要选择对应的策略号,然后点击“删除”即可。
==摘要== ==摘要==

Revision as of 21:00, 9 February 2009

访问限制 允许用户按组创建规则,管理外网访问内网上的机器。规则可以按:个人 IP、MAC 物理地址、IP范围、 时间日期、流量类型、URL 或关键字 等创建,管理访问权限。

用户能创建多达10组规则,每组规则归类为一个策略一个策略能包含对个独立的规则,例如过滤个别机器访问特定网站,或者过滤一个确切的不想要的P2P协议。

Remember that all policies will be used (this is different than in factory Linksys firmware where only the first matched is used)! For example, if policy #1 is a Deny policy that restricts all internet access to a machine on your LAN, that machine will no longer be able to access the Internet, regardless of any Filter policies you might have. Note: The term "Filter" is erroneously labeled as "Allow" in earlier versions of DD-WRT firmware. This is the main source of confusion when dealing with access restrictions in DD-WRT. See Eko's forum post for more information.

The Filter option is used to block access to web sites, services, or keywords. However, it does not block internet altogether like the "Deny" option does. Nor does it allow internet access during times that a Deny policy denies it.

If you will notice, when you click the "Deny" button (instead of the Filter button), those extra options at the bottom of the page get greyed out (at least in newer dd-wrt versions). This is because filtering a web site, service, etc. in a Deny policy is pointless since the machines in the policy would be denied internet access anyway!

Contents

拒绝互联网访问

  1. Select an unused policy number (1-10) in the drop-down menu.
  2. Enable your policy by setting Status to Enable.
  3. Enter a name for your policy in the Policy Name field. Ex. "Deny Internet"
  4. Click the Edit List of clients button.
  5. On the List of clients screen, specify clients by IP address or MAC address. Enter the appropriate IP addresses into the IP fields. If you have a range of IP addresses to filter, complete the appropriate IP Range fields. Enter the appropriate MAC addresses into the MAC fields.
  6. Click the Save and Apply buttons to save your changes. Click the Close button to return to the Access Restrictions screen.
  7. Click the radio button next to Deny Internet access for listed clients during selected days and hours.
  8. Set the days when internet access will be denied. Select Everyday or the appropriate days of the week.
  9. Set the time when internet access will be denied. Select 24 Hours, or check the box next to From and use the drop-down boxes to designate a specific time period.
  10. Click Save and Apply.
  11. To create or edit additional policies, repeat the necessary steps above.

过滤服务/URLs/关键词

For more advanced content filtering try OpenDNS

  1. Select an unused policy number (1-10) in the drop-down menu.
  2. Enable your policy by setting Status to Enable.
  3. Enter a name for your policy in the Policy Name field. Ex. "Filter Bittorrent"
  4. Click the Edit List of clients button.
  5. On the List of clients screen, specify clients by IP address or MAC address. Enter the appropriate IP addresses into the IP fields. If you have a range of IP addresses to filter, complete the appropriate IP Range fields. Enter the appropriate MAC addresses into the MAC fields.
  6. Click the Save and Apply buttons to save your changes. Click the Close button to return to the Access Restrictions screen.
  7. Click the radio button next to Filter Internet access for listed clients during selected days and hours. (Remember, many DD-WRT versions will have an "Allow" option, but it really means "Filter")
  8. Set the days when access will be filtered. Select Everyday or the appropriate days of the week.
  9. Set the time when access will be filtered. Select 24 Hours, or check the box next to From and use the drop-down boxes to designate a specific time period.
  10. Under Blocked Services, enter the services you wish to block (if any).
  11. Under Website Blocking by URL Address, enter in the domain name(s) you wish to block (if any).
  12. Under Website Blocking by Keyword, enter the keywords you wish to block (if any).
  13. Click Save and Apply.
  14. To create or edit additional policies, repeat the necessary steps above.

Note: Filtering does not work if you don't enter a list of clients for that policy.

删除

删除互联网访问策略,只要选择对应的策略号,然后点击“删除”即可。

摘要

To see a summary of all the policies, click the Summary button. The Internet Policy Summary screen will show each policy's number, Policy Name, Days, and Time of Day. To delete a policy, click its box, and then click the Delete button. Click the Close button to return to the Filters screen.

过滤互联网端口范围

To filter PCs by network port number, select Both, TCP, or UDP, depending on which protocols you want to filter. Then enter the port numbers you want to filter into the port number fields. PCs connected to the Router will no longer be able to access any port number listed here. To disable a filter, select Disable.

Filtering Inbound Traffic

See Iptables.


Problems/Issues?

Still having problems with Access Restrictions? You may be using an older and no longer maintained version of DD-WRT firmware. In that case, it may help to review the steps in an older revision of this article, before it was modified for use with DD-WRT v24+