Block Internet access to an IP address

Question

Hello everyone,   So here’s my problem:  I have a network of 4 computers at home. I would like to block internet access to certain computers using their IP addresses, all through my router, but I don't know how to go about it. I also need to keep the network connection with the other computers.  Of course, I have already assigned fixed IPs to all my computers. And in my router, there is a very interesting option, the ability to set filters (inbound or outbound). I don't know what this is for and if someone could explain it, that would be very kind.  So that’s my problem. Does anyone have a solution for me, please?  Thank you in advance for your help and feel free to ask me for more information.  CooLMaN.

snooki · Accepted Answer

First, I advise you to use MAC address filtering; fewer people know how to change a MAC address than an IP.
I believe not all routers support filtering; what router do you have?
What is the name of your filtering option? If it's called NAT, that's not it at all; it allows, for example, to open port 80, and if someone with bad intentions scans your open ports, they will see, for instance, port 5000, and they won't know what it corresponds to.
Can you provide more information about this option? Name, fields to fill out...

CooLMaN974 · Answer

First of all, thank you for your response snooki :)

I have a D-Link DSL-2740B router.

So the filtering options are called: incoming filter, outgoing filter.

The fields to fill in both cases are:

- filter name
- Protocol
- source IP address
- source subnet mask
- source port
- destination IP address
- destination subnet mask:
- destination port
- Program (choice between always, never, or you can schedule the hours when the filter should be activated)

For destination port and source port there is a small indication next to it: (port or port:port)

What does port:port mean? Is it a special notation for choosing a range of ports?

Regarding MAC address blocking, yes it is possible. But this blocking is only possible if the computer is directly connected to the router. However, in my case, there is a switch between the router and the computer that I want to block from accessing the internet.

If you need screenshots, feel free to ask me for them.

snooki · Answer

So for the MAC address, there shouldn't be a problem, especially since I assume it's an unmanaged switch. I would go by MAC address, but it's up to you!
For port:port, the first is the port that will be opened by your router to the internet, and the second will be the port opened by your router on your private network.
You can find the list of ports with their utility and protocol at https://www.frameip.com/liste-des-ports-tcp-udp/
What you're showing me looks more like port forwarding; I'd like to see a screenshot to understand better.
I noticed that your router has a firewall, so it will be mainly about configuring that. I have a D-Link DI-524, and in my firewall options, I can block access from LAN to WAN and target a range of IPs. For the ports, you should block from 0 to 1023 (that includes the main services like web, messaging, etc.), and for the time, you can either set it to be all the time or for example, cut it off starting at 10 PM to prevent the kids from staying up late!
Otherwise, I also have a filtering option that allows me to block internet access, but it seems to differ from yours.

CooLMaN974 · Answer

Indeed, you're right, I just saw that it's port forwarding.

I'm still sending you screenshots:

- first of the filter option page,

http://moe.mabul.org/up/moe/2009/04/25/img-201951b09wl.jpg

- then a page that seems necessary for the filters,

http://moe.mabul.org/up/moe/2009/04/25/img-201713uv8q2.jpg

- a page of the firewall... which looks very, very basic,

http://moe.mabul.org/up/moe/2009/04/25/img-202104dplao.jpg

- and finally a page for blocking by MAC address,

http://moe.mabul.org/up/moe/2009/04/25/img-202707n6ots.jpg

As you can see, the client must already be connected to block it; we cannot manually enter a MAC address. However, when computers are behind the switch, it's as if there are no clients connected.

I hope this helps :)

P.S.: yes, it's a non-managed switch.

snooki · Answer

A MAC address is an address that, if you've never changed it, is unique. Each network card has its own assigned MAC address. In a frame, when you peel it apart, you can find the source and destination IP addresses and the source and destination MAC addresses.
A frame that passes through a basic switch will not be changed, so your router should be able to have information on the MAC address of the device that sent something to it.
The MAC filter option in WLAN under advanced settings seems interesting, take a look at it!
Otherwise, if your devices are on Wi-Fi, go to advanced settings - Wi-Fi network, you may be able to block some addresses there, but they will lose Wi-Fi altogether.
And otherwise, what do you have in advanced LAN settings?

lamidesbetes · Answer

Hi, I'm on a shared connection,

I've tried everything (firewall, registry...)
I still have unwanted connections that block my connection every 5 minutes.

Is it possible to block an IP or a MAC address on the client (from the DLINK router on WAN) via the registry or command line? Right now I have to disconnect connections with the mouse EVERY time I open a page...

For the registry, I tried zonemap but the IP connections still exchange in upload and download.

Thank you.

PS: Zalam is quickly "degraded", probably a conflict with the router's firewall.

Thanks.

Tech · Answer

No, simply go to schedule before and after in .access Control Add policy

Block Internet access to an IP address

7 réponses

Texture issues in enshrouded

Canon mb5350 - cartridge replacement impossible

Football manager (club management game)

Select next line csh foreach

Win32 kamso then rootkit detection

Win32:spyware-gen [trj] detected by avast

Unknown video error on the freebox player

Make it or break it

How to open a cbr file

Please log in with manager privileges.