Talk:Access Restrictions

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 21:04, 11 April 2007 (edit)
Kb1Qzg (Talk | contribs)
m
← Previous diff
Revision as of 09:45, 15 May 2007 (edit) (undo)
WiLDTHiNG (Talk | contribs)
(Defining Access Restrictions)
Next diff →
Line 32: Line 32:
Can someone write the Inbound Connections part please? [[User:Towsonu2003|Towsonu2003]] 22:51, 7 Sep 2006 (CEST) Can someone write the Inbound Connections part please? [[User:Towsonu2003|Towsonu2003]] 22:51, 7 Sep 2006 (CEST)
 +
 +== Defining Access Restrictions ==
 +
 +Having spent a good deal of time working on the access restrictions and not being able to find a definitive 'way of working' I thought I'd share how I've configured them, This may not be the best way but it has worked for me.
 +
 +The first rule (number 1) should effectively 'deny all' . . . check deny, everyday & 24 hours and save.
 +
 +From there create your allow rules.
 +
 +It is my understanding that the rules are processed 1 through 10 so consider this when creating 'allow' rules.
 +
 +Hope this helps.

Revision as of 09:45, 15 May 2007

I just wanted to mention the bugs #48 and #355 (today is Dec. 5, 2005) but they'll probably be solved soon. (logging doesn't work when L7-blocking was activated)

And I think an explanation of the "P2P" "L7" "UDP" "TCP" "UDP TCP" differences would be great. As I understand it, UDP and TCP blocks everything. L7 is a layer 7 - i.e. application layer-blocker that analyzes the packages to see whether it's for example filesharing stuff. But I don't know what "P2P" is for. I also don't know, whether or how one can create own L7 filters.

And I find this "Policies are processed in order. This is an important item to remember when creating Deny policies." sentence confusing. I woudl have expected that "processed in order" would mean, that a rule in the 2nd slot can "override" a rule in the 1st slot.

This help seems not to refer to the current version. In the current version the "profile name" is called "policy name" and there is no reference to the "Policy type" which can be either "Internet Access" or "Inbound Traffic"

It seems to me that the most important thing about the access restriction is the filtering. Who would not allow any internet while specific times? I think that therefore it would be apropriate to mention, that one uses a "Allow everything, everywhen"-policy and adds restrictions for that. And I'm unsure whether one then has to add a deny-policy at the end. Could someone tell me whether this is a must?


Thanks, Jack Hambabo, Dec. 5, 2005



Once a again I find this "high" and "low" confusing, as I first thought that "1" would be high, as it is high on the list.

And I wanted to mention the bugtracker item 388, as it states that in version 16th Nov and 3rd Dec access restrictions are broken. And even more if it isn't the configuration is so complicated that at least two didn't manage to set it up. So especially in this case a good documentation would be needed.

Thanks, Jack Hambabo, Dec. 6, 2005

Inbound Connections

Can someone write the Inbound Connections part please? Towsonu2003 22:51, 7 Sep 2006 (CEST)

Defining Access Restrictions

Having spent a good deal of time working on the access restrictions and not being able to find a definitive 'way of working' I thought I'd share how I've configured them, This may not be the best way but it has worked for me.

The first rule (number 1) should effectively 'deny all' . . . check deny, everyday & 24 hours and save.

From there create your allow rules.

It is my understanding that the rules are processed 1 through 10 so consider this when creating 'allow' rules.

Hope this helps.