Access Restrictions

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 03:37, 22 February 2007 (edit)
1172114605 (Talk | contribs)

← Previous diff
Revision as of 12:14, 21 January 2008 (edit) (undo)
Soulstace (Talk | contribs)
(http://www.dd-wrt.com/phpBB2/viewtopic.php?t=26312)
Next diff →
Line 1: Line 1:
-'''Access restrictions''' allow you to create a set of rules that govern internet access by machines on your network. You can create rules that govern access by individual machine, time-of-day, traffic type, URL and keywords.+'''Access restrictions''' allow you to create a set of rules that govern internet access to machines on your network. You can create rules that govern access by individual machine, IP address range, time-of-day, traffic type, URL and keywords, etc.
-You can create up to 10 sets of rules, called a policy. A policy can contain multiple individual rules (such as denying a particular machine access to a particular web site). '' Remeber that policies are processed in order.''' For example, if Policy #1 is a Deny policy that restricts all internet access for your entire network, no machines will be able to access the internet regardless of any Allow policies you might have in spots 2-10.+You can create up to 10 sets of rules, each set of rules being referred to as a '''policy'''. A policy can contain multiple individual rules, such as blocking a specific machine access to a particular web site, and/or blocking access to certain unwanted P2P protocols.
-A good rule of thumb is, place your global '''deny''' policies in high numbered slots, and place your individual '''allow''' policies in low numbered slots. For example, to create policies that allow only specified machines access to the internet, create the following:+''Remember that all policies will be used (this is different than in factory Linksys firmware where only the first matched is used)!'' For example, if policy #1 is a '''Deny''' policy that restricts all internet access to a machine on your LAN, that machine will no longer be able to access the Internet, regardless of any '''Filter''' policies you might have. (Note: The term "Filter" is erroneously labeled as "Allow" in earlier versions of DD-WRT firmware. See [http://www.dd-wrt.com/phpBB2/viewtopic.php?t=26312 Eko's forum post] for more information.)
- +
-Policy 1: Allow MAC addresses X, Y and Z access to the internet.+
-Policy 10: Deny IP address 192.168.1.0 - 192.168.1.254 access to the internet.+
==Create/Edit a Policy== ==Create/Edit a Policy==
Line 14: Line 11:
# On the List of PCs screen, specify PCs by IP address or MAC address. Enter the appropriate IP addresses into the IP fields. If you have a range of IP addresses to filter, complete the appropriate IP Range fields. Enter the appropriate MAC addresses into the MAC fields. # On the List of PCs screen, specify PCs by IP address or MAC address. Enter the appropriate IP addresses into the IP fields. If you have a range of IP addresses to filter, complete the appropriate IP Range fields. Enter the appropriate MAC addresses into the MAC fields.
# Click the Apply button to save your changes. Click the Cancel button to cancel your unsaved changes. Click the Close button to return to the Filters screen. # Click the Apply button to save your changes. Click the Cancel button to cancel your unsaved changes. Click the Close button to return to the Filters screen.
-# If you want to block the listed PCs from Internet access during the designated days and time, then keep the default setting, Disable Internet Access for Listed PCs. If you want the listed PCs to be able to access the Internet during the designated days and time, then click the radio button next to Enable Internet Access for Listed PCs.+# If you want to block the listed PCs from Internet access during the designated days and times, then click the radio button next to Deny Internet Access for Listed PCs. If you want to filter Internet during the designated days and times, then click the radio button next to Filter Internet Access for Listed PCs.
-# Set the days when access will be filtered. Select Everyday or the appropriate days of the week. +# Set the days when access will be denied/filtered. Select Everyday or the appropriate days of the week.
-# Set the time when access will be filtered. Select 24 Hours, or check the box next to From and use the drop-down boxes to designate a specific time period. +# Set the time when access will be denied/filtered. Select 24 Hours, or check the box next to From and use the drop-down boxes to designate a specific time period.
# Click the Add to Policy button to save your changes and active it. # Click the Add to Policy button to save your changes and active it.
-# To create or edit additional policies, repeat steps 1-9. (Remember - policies are processed in order! You should create your global Deny policies last, and individual Allow policies first)+# To create or edit additional policies, repeat steps 1-9.
 + 
==Delete== ==Delete==
Line 34: Line 32:
[[Category:English documentation]] [[Category:English documentation]]
[[Category:Basic tutorials]] [[Category:Basic tutorials]]
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
-<div style="display:none"> 
-[l_sp_26] 
- 
-[http://misa.pimpblog.nl/ pergo laminate flooring] 
-[http://vesna.reciter.com/ installing laminate floor] 
-[http://viva.reciter.com/ paperless payday loan] 
-[http://www.blogagotchi.com/bobovina/ No Telecheck Payday Loan] 
-[http://www.blogagotchi.com/busek/ ics payday loan] 
-[http://www.blogagotchi.com/cher/ Tankless Water Heater] 
- 
-</div> 

Revision as of 12:14, 21 January 2008

Access restrictions allow you to create a set of rules that govern internet access to machines on your network. You can create rules that govern access by individual machine, IP address range, time-of-day, traffic type, URL and keywords, etc.

You can create up to 10 sets of rules, each set of rules being referred to as a policy. A policy can contain multiple individual rules, such as blocking a specific machine access to a particular web site, and/or blocking access to certain unwanted P2P protocols.

Remember that all policies will be used (this is different than in factory Linksys firmware where only the first matched is used)! For example, if policy #1 is a Deny policy that restricts all internet access to a machine on your LAN, that machine will no longer be able to access the Internet, regardless of any Filter policies you might have. (Note: The term "Filter" is erroneously labeled as "Allow" in earlier versions of DD-WRT firmware. See Eko's forum post for more information.)

Contents

Create/Edit a Policy

  1. Select the policy number (1-10) in the drop-down menu.
  2. Enter a name in the Enter Profile Name field.
  3. Click the Edit List of PCs button.
  4. On the List of PCs screen, specify PCs by IP address or MAC address. Enter the appropriate IP addresses into the IP fields. If you have a range of IP addresses to filter, complete the appropriate IP Range fields. Enter the appropriate MAC addresses into the MAC fields.
  5. Click the Apply button to save your changes. Click the Cancel button to cancel your unsaved changes. Click the Close button to return to the Filters screen.
  6. If you want to block the listed PCs from Internet access during the designated days and times, then click the radio button next to Deny Internet Access for Listed PCs. If you want to filter Internet during the designated days and times, then click the radio button next to Filter Internet Access for Listed PCs.
  7. Set the days when access will be denied/filtered. Select Everyday or the appropriate days of the week.
  8. Set the time when access will be denied/filtered. Select 24 Hours, or check the box next to From and use the drop-down boxes to designate a specific time period.
  9. Click the Add to Policy button to save your changes and active it.
  10. To create or edit additional policies, repeat steps 1-9.


Delete

To delete an Internet Access Policy, select the policy number and click the Delete button

Summary

To see a summary of all the policies, click the Summary button. The Internet Policy Summary screen will show each policy's number, Policy Name, Days, and Time of Day. To delete a policy, click its box, and then click the Delete button. Click the Close button to return to the Filters screen.

Filtered Internet Port Range

To filter PCs by network port number, select Both, TCP, or UDP, depending on which protocols you want to filter. Then enter the port numbers you want to filter into the port number fields. PCs connected to the Router will no longer be able to access any port number listed here. To disable a filter, select Disable.

Filtering Inbound Traffic

Please somebody write this section.