Recent content by Thorgear

It plays very nice. I'm showing off a bit, but take a look.

For what it's worth, I use PRTG to monitor CPU remotely.

Can't help you there.

I found the problem.

Another way is to use WFilter. It also uses a blocking page, but the page is customizable. I suppose you could create a blank page or something like that.

OK. Well, I like the ipset idea. I use iptables to drop packets from certain IPs or MACs. There's probably a way to specify destination addresses, although I'm not sure you will get DNS resolution.

My posts are showing up as "awaiting moderator approval". I doubt you're seeing this.

What do you want to happen when they hit a blocked site?

How about opendns and no-ip?

FYI, I originally used a different method. I modified the "blurry page" with a short message.

I do that very thing using iptables and optware/nginx. These are the rules I use redirect by ip or mac: for ip in $iplist do iptables -t nat -I PREROUTING 3 -p tcp -s $ip -j DNAT --to-destination 10.0.2.1:8000 iptables -I FORWARD 2 -s $ip -j DROP done for mac in...

I solved it! I went with 255.255.255.0 everywhere. I would have sworn I'd tried that already. Apparently not. From what I know, this shouldn't work. I thought I had to use .252. on the endpoints. Well, at least it works now.

You know what, I take all that back. On the GW, traffic is only passing through the switch. On the RT, traffic is going through the router. I guess the problem does have to be in the RT.

You're probably right, but I'm still holding out for a configuration issue. The reason I'm hopeful is that in order for it to be a FW problem, it would have to be a problem in both AsusWRT and Tomato. The symptoms are symmetrical: WS2 can go everywhere, but it stops at RT when it tries to get to...

That's what I thought. I was hoping you meant something else - that might have helped. I'll keep at it. Thanks for the help.