Recent content by amoney

Confirmed working as expected. Removed the user defined script, rebooted router, updated YazFi and selected allow internet to no. See the following new rules in the YazFiFORWARD chain 0 0 DROP all -- tun1+ wl0.3 0.0.0.0/0 0.0.0.0/0 /* YazFi 2.4GHz 3 block...

I see. I will test out the develop version and then switch back to master when the new release happens. Will report back shortly. Since i added iptables rules in a custom script would i need to reboot the router or will the existing rule get removed if just remove my user defined script?

nice. Do i just run YazFi master if i want to switch back to the GA release?

I setup the following by looking at the existing YazFi firewall rules that were setup arpit@RT-AC88U-BC40:/tmp/home/root# cat /jffs/addons/YazFi.d/userscripts.d/myscript.sh #!/bin/sh # disable internet access for subnet iptables -I YazFiFORWARD -s 192.168.4.0/24 -o eth0 -j YazFiREJECT...

Thanks. I think i follow now. I can add the original command to /jffs/scripts/firewall-start afer YazFi is called. I will also try to use the YazFi custom script and see if i can get that to work.

Thanks will give both a shot and see what works.

Also when i run the command i get an error iptables -I FORWARD -s 192.168.4.0/24 -o "$1" -j REJECT iptables v1.4.15: Empty interface is likely to be undesired Try `iptables -h' or 'iptables --help' for more information. on RT-AC88U: 386.3_2

Thanks. Curious if i can add the same in the custom user defined script or it has to go in the firewall start script for YazFi? https://github.com/jackyaz/YazFi talks about custom firewall rules can be defined in /jffs/addons/YazFi.d/userscripts.d/myscript.sh

thats what i had tried first and it did not work so i thought may be i needed to specify ports. Will give it another try without the ports. Edit: I do have YazFi enabled if that makes any difference. Sorry should have mentioned this earlier.

hmm cant seem to get it working. Did the following both for udp and tcp. source ip: 192.168.4.0/24 destination port range: 1:65535 rebooted the router and the guest network still has access to internet.

Nice. Learned something new today. Will set it up :).

Hi I am trying to create a guest network that i will use for IOT devices and i would like to disable internet access. I see YazFi has support for providing custom firewall rules. So i think that is a possibility. I was wondering if there is any other easier method :), if not I will get on...

Regarding messages log file. I just typed .log without realizing. Its actually logging in /opt/var/log/messages. Will fix post. I ran scribe status right now and looks like configs and links got updated checking system for necessary scribe hooks ... checking S01syslog-ng ...

I have seen this a few times where logs are no longer getting updated. After reboot everything is fine. For example here are entries from messages when i rebooted Dec 19 00:00:58 RT-AC88U-BC40 dnsmasq-dhcp[28068]: DHCPACK(wl0.2) 192.168.3.207 90:03:b7:f6:53:3d Dec 22 08:19:14...

Ok i am seeing the speeds drop down again and reboot fixed it again. Is this expected? I see reboot schedule feature available on the admin tab so i can always set that up. So wanted to check if there is anything else i should debug before i enable weekly reboots.