[RT-AC66U] [Solved] Would like clarification and help in regards to Network Services Filter

[rice_eater]

According to this block of text in router configuration page, under Firewall - Network Services Filter:

The Network Services filter blocks the LAN to WAN packet exchanges and restricts devices from using specific network services.

For example, if you do not want the device to use the Internet service, key in 80 in the destination port. The traffic that uses port 80 will be blocked.

If I added the rules 80 and 443 to the destination ports and set the filter tale type as blacklist, no devices going through the router should be able to access the internet. This doesn't seem to be working for me though because devices on the network are still able to access the internet. "Enable Firewall" and "Enable Network Services Filter" are both set to yes. Am I interpreting that block of text incorrectly that it's intended to do something else? I've just spent like 7 hours trying to figure out how to use the Network Services Filter with no success.

My intention is to block out email ports (587, 465, 2525, 2526, 110, 143, 993, 995, 25, 26) on my network because a device is sending out spam and emails with viruses attached to it. I'm using Asuswrt-Merlin 380.63_2 and not the stock firmware.

 

[wouterv]

Maybe paste a screen dump of what you have configured in the Network Services Filter page.
Anway I suggest to start to clean or detach that device that is sending out spam and emails with virusses.

 

[rice_eater]

I've attached the Firewall and Network Services Filter pages. The Network Services Filter page is configured to the address of my computer only white listed at the moment.

I'm not sure which device is sending out the spam and viruses. I live in a household of seven people and everyone has more than one device.

 

[wouterv]

What do you expect the white list to do without any ports configured?

 

[rice_eater]

What do you expect the white list to do without any ports configured?

Block out all other devices that aren't my computer.
I just changed both rules to cover ports 1-65535. Nothing is being filtered/blocked.

 

[rice_eater]

I came across this posting from this forum from Google's search engine:

http://www.snbforums.com/threads/firewall-network-services-filter.20276/page-2

The user here had issues with Network Services Filter because of Parental Controls. I checked patch notes for the Asus-Wrt Merlin firmware and came across this for the previous version 380.63 (6-Nov-2016):

- FIXED: Network Service Filter rules would only apply to clients
under Parental Control if that was enabled (original
debugging by john9527) (Asus bug)

I turned on Parental Controls and added only my computer allowing 24-hour access and afterwards the white list from Network Services Filter seems to be working. No other devices are able to access anything at all.

I've also further verified this by enabling logging of both packet types (dropped and accepted) from the Firewall configuration page and System Log is recording all the dropped packets from all devices from my network.