Recent content by Scobie

Connect to the router via SSH.

I don't see why it shouldn't work, try it out!

I finally solved it, this is what you want to do to block any domain with URL filtering for a certain MAC address: iptables -I FORWARD -p tcp -m mac --mac-source de:ad:de:ad:de:ad -m webstr --url youtube -j REJECT --reject-with tcp-reset iptables -I FORWARD -i br0 -p udp -m mac --mac-source...

Maybe dailymail doesn't use udp, cause when I block dailymail it works but not youtube. I guess the only thing left is how to type in the two udp commands, the problem is I haven't figured out how to do that yet.

Ok so after some tinkering I feel like I am getting closer. The above command does not work, but neither does the above command without the MAC. Anyway the global blocker adds the following rules: Chain INPUT (policy ACCEPT) num target prot opt source destination 1...

I have no idea how the iptables command really works, how would I edit/add to rule 3 that this would only be for MAC address XX:XX:XX:XX? If I do that, then I can probably add the global rule again from router.asus.com to edit the 2nd MAC address. Or maybe does this command actually work...

When I looked up the "iptables --line -t filter -nvL FORWARD", I found this, since I put twitch on global URL blocking for the time being: 3 0 0 DROP udp -- br0 * 0.0.0.0/0 0.0.0.0 /0 udp dpt:53 STRING match "twitch" ALGO name bm TO 65535...

Thanks for the detailed reply! The only problem I see with this though is that if I want to block something different on another device, it won't work. For example if I only want to block youtube on my computer but not twitch. I will probably use this however if I cannot find another method.

I just got a new Asus router and I installed Merlin and Diversion and so far it's looking amazing, big props to the developers. Anyway, stock Asus only has firewall blocking for every device, and parental controls blocks too many sites. How do I block URLs for certain MAC addresses? In practice...