While users get their IP’s from DHCP server. Also, i want to configure an squid server as an proxy server in such way that some of the users are not able to access the specific web sites but some users are able to access same websites. I dont want to put the commands in different devices to do something. However i have open the safe ports & iptable rule’s. I want to control the iptables from the main device only. You can see in the picture below that the command works for the device connected through the main router (first 2 rules in FORWARD chain) but the next two rules, there are no packets blocked. The path to this file defaults to /etc/calico/felix.cfg but can be overridden using the -c or -config-file options on the command line.
If you are in Linux you could use iptables to redirect traffic to different DNS servers based on their MAC addresses. On startup, Felix reads an ini-style configuration file. Set up a network for testing and set firewall rules to allow internal. Dnsmasq does not have that kind of functionality. I have searched google for this issue but haven't found any possible solutions for it. The following step-by-step guides already exist for more specific use cases. If a device is connected from the 2nd router the command has no effect on that device. This command is executed in the main router FORWARD chain and then it only works in the main router. The command I use to block the website for a particular mac address is: iptables -I FORWARD -p ALL -m mac -mac-source xxxxxxxx -m string -string "" -algo bm -m comment -comment "reject YouTube from ramzan mobile" -j REJECT The Netplan default configuration file is under the directory /etc/netplan. Note the interface name that you want to configure using Netplan. To do so run the following command: ip a.
If you decide to try Google Public DNS, your client programs will perform all DNS lookups using Google Public DNS. First, find the name of the active network interfaces that you want to configure. Or, read our configuration instructions (IPv6 addresses supported too). Main Openwrt (Custom firmware LEDE latest release) 192.168.1.1Ģnd Openwrt (Custom firmware LEDE latest release) 192.168.1.254 Configure your network settings to use the IP addresses 8.8.8.8 and 8.8.4.4 as your DNS servers. There is also another Openwrt router connected to the main router through WiFi with relayd configuration. I have a bridged ADSL2 router connected to an Openwrt Router where the internet gets connected through pppoe and then this router handles all the internet in the network. That only seems to work for devices connected through that specific router where the command was issued. I have done some search on this and found a couple of threads which say to block the websites through FORWARD chain in iptables. of squid) a firewall rule must be added to allow the certain IP to.
0 kommentar(er)
