Time scheduling whitelist

[Benjamin John]

Is it possible to only allow certain MAC addresses during specific times using parental controls?
Thank You

 

[RMerlin]

Yes, Parental Control can be used for this.

 

[ColinTaylor]

Yes, Parental Control can be used for this.

Can it? As far as I could see you can only block/allow individual clients. You can't block everything by default and then create a whitelist.

 

[Benjamin John]

Yeah, I would love to know how to do this. Is there a tutorial somewhere?
I searched before posting.
Thanks

 

[Adooni]

I think you looking for functionality like in Synology routers https://www.synology.com/en-global/srm/feature/device_content_control

I even asked about it Asus - no replay. if any of RMerlin addons devs will not needed it I do not see this happen

 

[RMerlin]

Can it? As far as I could see you can only block/allow individual clients. You can't block everything by default and then create a whitelist.

I thought he wanted certain MACs to only have access during specific time.

If he doesn't want anyone else to have Internet access, then he'll need to use Network Service Filters with IPs, or create his own iptables rules.

 

[Benjamin John]

Yes, I only want certain MAC's to have access to the Internet from 12 AM to 6 AM.
Is that possible?

 

[the_way]

I think you could enable Wireless MAC Filter allowing just those MACs and then restrict their access time by the time scheduling option in Parental Controls.

 

[eibgrad]

Yes, I only want certain MAC's to have access to the Internet from 12 AM to 6 AM.
Is that possible?

Still sounds a bit ambiguous, but here's my best guess.

MAC_ADDR='
90:8a:81:93:e0:0b
78:5e:3c:49:af:80
ee:3b:7d:ed:c8:52
'
for mac in $MAC_ADDR; do
    iptables -I FORWARD -i br+ -m mac --mac-source $mac \
        -m time --timestart 00:00 --timestop 06:00 \
        --weekdays Mon,Tue,Wed,Thu,Fri,Sat,Sun --kerneltz -j REJECT
done

For a given subset of MACs, they are denied access to the internet from midnight until 6:00 AM (local time), every day.

Needs to be installed within a firewall-start script.

NOTE: if your time period crosses midnight (e.g., 10:00PM to 6:00AM), then you need *two* rules, one to handle 10:00 to midnight, the other midnight to 6:00AM.