Differences

This shows you the differences between two versions of the page.

--- device_filtering [2023/05/24 21:14] – [Block devices via script/scheduler]-spelling hogwild
+++ device_filtering [2023/05/24 21:22] – [ebtables (routed environment)] hogwild
@@ Line 1: / Line 1: @@
 ====== Block devices via script/scheduler ======
-The easiest way to filter WiFi devices is to use the [[basic-wfilter|Wireless Filter]] menu. However, there are times when you want to block specific devices via a script. Scripting makes it easier to manage device blocking for a lot of devices. It also allows you to schedule blocking/filtering on or off, as needed.
+The easiest way to filter WiFi devices is to use the [[basic-wfilter|Wireless Filter]] menu. However, there are times when you want to block specific devices via a script. This is particularly true when you need to manage device blocking for a lot of devices. Scripting also allows you to schedule blocking/filtering on or off, as needed.
   * For a bridged environment (Media-bridge/Ethernet-bridge/FreshTomato-FreshTomato via Ethernet) you will need //ebtables.//
@@ Line 11: / Line 11: @@
-===== ebtables =====
+===== ebtables (routed environment) =====
-# Block\\  ''/usr/sbin/ebtables -A FORWARD -d aa:bb:cc:dd:ee:ff -j DROP''
+# Block\\  ''/usr/sbin/ebtables -A FORWARD -d AA:BB:CC:DD:EE:FF -j DROP''
  \\
-# Unblock\\  ''/usr/sbin/ebtables -D FORWARD -d aa:bb:cc:dd:ee:ff -j DROP''
+# Unblock\\  ''/usr/sbin/ebtables -D FORWARD -d AA:BB:CC:DD:EE:FF -j DROP''
  \\
@@ Line 23: / Line 23: @@
 # Flush (unblock all the defined references at once)\\  ''/usr/sbin/ebtables -F''\\  \\
- NOTE: you might have additional ebtables in your system so be very careful about flushing the full ebtable.
+ NOTE: you might have additional ebtables in your system so **be very careful** about flushing the full ebtable.
 ===== iptables =====
-# Block Internet access (or any intra-vlan)\\  ''/sbin/iptables -I **FORWARD** -m mac --mac-source aa:bb:cc:dd:ee:ff -j DROP''
+# Block Internet access (or any intra-vlan)\\  ''/sbin/iptables -I **FORWARD** -m mac --mac-source AA:BB:DD:EE:FF -j DROP''
  \\
-# Block any network acrtivity including services provided by the router itself e.g. minidlna/webserver/mysql)\\  ''/sbin/iptables -I **INPUT** -m mac --mac-source aa:bb:cc:dd:ee:ff -j DROP''
+# Block any network activity, including services provided by the router (e.g. minidlna/webserver/mysql)\\  ''/sbin/iptables -I **INPUT** -m mac --mac-source AA:BB:CC:DD:EE:FF -j DROP''
  \\
-# Unblock just rever whatever command replacinf -I with -D e.g.\\  ''/sbin/iptables -D FORWARD -m mac --mac-source aa:bb:cc:dd:ee:ff -j DROP''
+# Unblock just rever whatever command replacing -I with -D e.g.\\  ''/sbin/iptables -D FORWARD -m mac --mac-source AA:BB:CC:DD:EE:FF -j DROP''
  \\
-# Flush\\  ''You don't do that for iptables '':-)'' rather reboot the device''
+# Flush\\  ''You don't do that for iptables '':-)'' instead, reboot the device''
-These days, blocking MAC addresses can  be tedious task. Many client devices use a MAC randomization function. MAC addresses can "change" freqently.
+ \\
+These days, blocking MAC addresses can  be tedious task. Many client devices use a MAC randomization function. MAC addresses can "change" freqeently.
 For dealing with this, one alternative is to filter using hostnames.

FreshTomato Wiki

User Tools

Site Tools

Differences

Page Tools