Blocking IP with firewall

[dugaduga]

I'm trying to block incoming / outgoing IP's with AsusWRT firewall; most of these blocks take place only after Skynet is initiated; But what I am doing is looking to accomplish is blocking an IP prior to Skynet initiation.

I've tried the following for example:

iptables -I OUTPUT -D 8.8.8.8 -j DROP
iptables -A OUTPUT -D 8.8.8.8 -j DROP
iptables -I INPUT -s 8.8.8.8 -j DROP
iptables -A INPUT -s 8.8.8.8 -j DROP

and

iptables -I OUTPUT -D 8.8.8.8 -j DROP LOG --log-prefix "[BLOCKED - OUTBOUND] " --log-tcp-sequence --log-tcp-options --log-ip-options 2>/dev/null

None of these examples are showing up in the log; So I'm not sure if it is working. Only after Skynet initiates do I see any custom entries blocked. Any help appreciated! Thanks.

 

[DonnyJohnny]

Skynet used Raw table ( very first filter the moment packet enter router).. what your iptables configuration is in Filter table.
Try see
iptables -t raw --list

 

[Jack Yaz]

You need

-j logdrop

I believe