Hi there,
I was trying and testing without success to block the webpage from my modem to a certain range of IPs except my devices.
Is that possible without L7 o marking?
Regards
-
-
alejandro29
just joined
- Posts: 8
- Joined:
Re: Blocking stuff [Help needed]
You can create and account and use OpenDNS Home version for blocking specific or a group of web pages with the same purpose, such as group of web pages labeled as Video Sharing, News, Porn, etc.
I prefer this solution than making a bunch of L7 rules, because in my experience it makes the subnet conection slower to the internet.
You can exempt machines from getting blocked by making a NAT rule that redirects the machines you want (one rule for range of IPs, or several rules for each MAC) to a commonly use dns like 8.8.8.8 (google free DNS) and at the end place the rule that redirects the machines you like to block to the OpenDNS (208.67.222.222) .
I prefer this solution than making a bunch of L7 rules, because in my experience it makes the subnet conection slower to the internet.
You can exempt machines from getting blocked by making a NAT rule that redirects the machines you want (one rule for range of IPs, or several rules for each MAC) to a commonly use dns like 8.8.8.8 (google free DNS) and at the end place the rule that redirects the machines you like to block to the OpenDNS (208.67.222.222) .
Re: Blocking stuff [Help needed]
It's a good start. I do use DNS cache and web proxy so, how can I merge them in conjunction with OpenDNS through the Mk?You can create and account and use OpenDNS Home version for blocking specific or a group of web pages with the same purpose, such as group of web pages labeled as Video Sharing, News, Porn, etc.
I prefer this solution than making a bunch of L7 rules, because in my experience it makes the subnet conection slower to the internet.
You can exempt machines from getting blocked by making a NAT rule that redirects the machines you want (one rule for range of IPs, or several rules for each MAC) to a commonly use dns like 8.8.8.8 (google free DNS) and at the end place the rule that redirects the machines you like to block to the OpenDNS (208.67.222.222) .
Re: Blocking stuff [Help needed]
Any other suggestions?
Re: Blocking stuff [Help needed]
well you can block access to port 80 to the modem ip from all ips in your subnet and add an allow rule over the drop one only for the ips you want to access it
Re: Blocking stuff [Help needed]
Thanks for the insight. Could you please give me an example based on the web (192.168.100.1)?well you can block access to port 80 to the modem ip from all ips in your subnet and add an allow rule over the drop one only for the ips you want to access it
Who is online
Users browsing this forum: No registered users and 10 guests