Solved TUF AX3000 V2 How exactly does it block internet access?

[Unranked8891]

When I, from the WebUI, block a device from accessing the internet, how exactly does AsusWRT block it? I know it doesn't use Iptables or Ebtables. What does it use? If someone will enlighten me, I shall be very grateful. Thanks.

 

[ColinTaylor]

It uses iptables.

 

[Unranked8891]

It uses iptables.

After reading your answer I checked the rules again and yes it indeed does it via iptables. I probably missed it before because it uses mac address instead of an IP.
-A PControls -i br0 -m mac --mac-source 64:95:6C:B2:D5:00 -j DROP
Thanks again!

 

[bennor]

On a RT-AX86U Pro running Asus-Merlin 3006.102.4_beta2 (192.168.1.1) with two Guest Network Pro Profiles (br52, br53), a iptables-save shows the following for one device (00:90:A9:D0:CX:11) that has it's Internet blocked via Parental Controls - Time Scheduling:

-A PREROUTING -i br0 -m mac --mac-source 00:90:A9:D0:CX:11 -j PCREDIRECT
-A PREROUTING -i br52 -m mac --mac-source 00:90:A9:D0:CX:11 -j PCREDIRECT
-A PREROUTING -i br53 -m mac --mac-source 00:90:A9:D0:CX:11 -j PCREDIRECT

-A PCREDIRECT ! -d 192.168.1.0/24 -i br0 -p tcp -m tcp --dport 80 -m mac --mac-source 00:90:A9:D0:CX:11 -j DNAT --to-destination 192.168.1.1:18099
-A PCREDIRECT ! -d 192.168.1.0/24 -i br52 -p tcp -m tcp --dport 80 -m mac --mac-source 00:90:A9:D0:CX:11 -j DNAT --to-destination 192.168.1.1:18099
-A PCREDIRECT ! -d 192.168.1.0/24 -i br53 -p tcp -m tcp --dport 80 -m mac --mac-source 00:90:A9:D0:CX:11 -j DNAT --to-destination 192.168.1.1:18099

-A FORWARD -i br0 -m mac --mac-source 00:90:A9:D0:CX:11 -j PControls
-A FORWARD -i br52 -m mac --mac-source 00:90:A9:D0:CX:11 -j PControls
-A FORWARD -i br53 -m mac --mac-source 00:90:A9:D0:CX:11 -j PControls

-A PControls -i br0 -m mac --mac-source 00:90:A9:D0:CX:11 -j DROP
-A PControls -i br52 -m mac --mac-source 00:90:A9:D0:CX:11 -j DROP
-A PControls -i br53 -m mac --mac-source 00:90:A9:D0:CX:11 -j DROP