Firewall Deny IP range

[oranheim]

Hi,

How can deny an IP or an IP Range, so they are completely blocked for any incoming and outgoing traffic? Are there any scripts (jffs) that can help out?

Someone in China tries to connect to my SSHD every 2 seconds. I want to cut them off.

I use the latest firmware 378.50 on AC87U.

Ove

 

[Martineau]

Hi,

How can deny an IP or an IP Range, so they are completely blocked for any incoming and outgoing traffic? Are there any scripts (jffs) that can help out?

Someone in China tries to connect to my SSHD every 2 seconds. I want to cut them off.

I use the latest firmware 378.50 on AC87U.

Ove

https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset

Replace "-m set --set" with "-m set --match-set"

 

[oranheim]

Thanks. But, in which file do I put the IPs?

 

[Martineau]

Thanks. But, in which file do I put the IPs?

The original link creates a directory into which the IPSET rule data is stored.

Alternatively, this script

http://forums.smallnetbuilder.com/showpost.php?p=153378&postcount=52

allows you to specify the IPSET rule criteria easily on the command line.

 

[oranheim]

Thanks a lot!

 

[coxhaus]

The normal router way to control IP addresses in a router is with Access Lists. You just create a block for the IP address or class of addresses. I don’t know why ASUS does not add this feature. This is a basic function for a router to perform.