iptables -

[Bob Goodwin]

On 02/08/16 17:24, Mike Wright wrote:
> On 02/08/2016 02:10 PM, Bob Goodwin 
> wrote:
>>
>> Can someone give me an example [for 
>> my router] of the iptables code
>> needed to prevent 192.168.1.17 from 
>> connecting to the internet while
>> keeping normal LAN access?
>
> Hi Bob,
>
> Decided lack of info to go on but this 
> will accomplish that.
>
> If you just want the internet to be 
> "non-existent" WRT 192.168.1.17 the 
> easiest way is to DROP all traffic 
> between them.
>
> Let eth0 be the internet connected 
> network card.
>
> iptables -t filter -A INPUT -i eth0 -d 
> 192.168.1.17 -j DROP
> iptables -t filter -A OUTPUT -o eth0 
> -s 192.168.1.17 -j DROP
>
>
That helps, I had a router on the shelf 
that I decided to try openwrt on, it 
works slick but it doesn't have some of 
the access control features of Tomato 
and DD-WRT that I am accustomed to and 
requires adding code to iptables which 
is really beyond my skill level ... But 
I intend to give it a try.

Thanks to you and Richard,

Bob

-- 
Bob Goodwin - Zuni, Virginia, USA
http://www.qrz.com/db/W2BOD
box10  FEDORA-23/64bit LINUX XFCE POP3