D-Link Forums
The Graveyard - Products No Longer Supported => Routers / COVR => DIR-628 => Topic started by: CJJLAG on February 09, 2011, 04:54:13 PM
-
I uploaded the newest firmware on my 628 and can only get part of the access control to work. I can explicitly block by IP or MAC for all traffic but cannot use the website filter to work. When I set up a policy for some access it leaves the thing wide open.
I have already checked the system time on both the router and computers as well as verifying the ip/mac addresses.
Anyone have the same issues? I called tech support and they were no help. they suggested that the hardware was bad and I should get another. I can't see how the hardware would prevent the website filter from working.
In the log it appears that the changes to the website filter are failing to update.
Ideas?
-
Was it working before you updated ???
-
Don't know. The router came with a very old version of firmware prior to the updates for Shareport and the new one got rid of securespot. Both were important to me so I updated prior to doing any configs.
Also 1.22 was supposed to fix a problem with access control and the version that was on the router was prior to that one.
Do you have v1.25NA working with access controls and webfiltering?
Here is what I see in the log when I try to add or delete from the Website Filter;
[INFO] Thu Feb 10 07:36:11 2011 Local firewall edits sent unsuccessfully.
[INFO] Thu Feb 10 07:36:08 2011 Log viewed by IP address 192.168.0.195
[INFO] Thu Feb 10 07:36:01 2011 Establishing connection w/ auth server: 174.78.110.160:443.
[INFO] Thu Feb 10 07:36:00 2011 Stored configuration to non-volatile memory
-
I don't use access controls or web filtering. And I don't have access to a 628 anymore.
Have you set up static reserved IP addressing then setup the filters after for each IP address you need to filter?
-
Yes I tried that also...
Seems that I can only completely block a system from access. It doesn't look like the settings are actually being uploaded to the firewall.
-
Sounds like this could be a bug ???. How long have you had this router?
-
Just put it on the network a few days ago. How do we get D-link to look at this?
-
See if you can PM both Moderators on here and ask them to look at this thread and give them the full details. See if there is any other options or settings that you might be missing. Make sure your setup correctly. Let us know how it goes.
-
Thanks, just sent it off, will post back here if we get some resolution.
-
.................nothing yet..................
-
Any chance of you trying a different model router to see if this happens for a test? Might help to see if this issue tracks or not. I wish I could offer more help.
How are you testing your configuration out? Just curious here.
If you can give some details, I can see if I can try this out at home on my DGL-4500.
-
Not sure I am following your logic. I have another router but it wont help, too old and its a netgear.
I have two policies set:
1. Block all for laptop MAC from Monday-Thursday, all day.
2. Block Some access for laptop MAC from Friday to Sunday all day, using the web filter list
I can see the router setting the correct policies when I reboot. During the week, under policy #1 the laptop has no access at all, which is correct. On Friday, the new policy takes effect and I see the router report that the new policy is loaded. However, the laptop has unrestricted internet access.
When I update the web filter I get the message:
[INFO] Thu Feb 10 07:36:11 2011 Local firewall edits sent unsuccessfully.
Not sure what else can be done, I can't downgrade the firmware so unless they do a fix, I have a brick.
-
Ok, well I notice that the Access controls are the same on these routers. I'll set up Mac Book Pro for the same days and see if I'm getting the same results.
Are there any specific web sites I would use or can I use any site to block for this test?
-
On the weekends I block all except fender.com
-
Ok, will check it out and see what I find on mine.
-
I Need you to detail me how your setting up the Access control if you would, step by step.
Is this Mac using WiFi or wired connection? If WiFi, what mode are you using?
-
Laptop is WiFi 802.11g WPA2 AES
Router is MAC filtering
Web filter set to Allow only to fender.com
1. Block all for laptop MAC from Monday-Thursday, all day.
2. Block Some access for laptop MAC from Friday to Sunday all day, using the web filter list
-
Ok, just making sure I'm setting mime up correctly. Do you set up the schedule first then go back and set the Access Control and Mac filters? I will make sure I'm on WiFi g only.
-
No,
Mac filter first, then web fliter, schedule and then access control. If you try access control first it will kick you out to create the schedule and web filter.
-
Got it..ok will try this when I get home tonite.
-
Ok, I set it up, as you did accept I changed the days so I could test it out today. I was able to prevent my Mac from againing access to the Internet and received DLink access denied messages to sites not listed in the web filter. The only site I could go to was www.fender.com.
I believe these features are the same in principle and is a valid test. I presume that if your set up is the same that you should be getting the same results which you are not. I think your router and or the FW has an issue here. More like the FW I think.
DGL-4500/A1/v1.23 FW for record keeping.
-
Thanks, I suspected that would happen. Maybe I should consider a DGL-4500....
-
Well I would either return the router to place of purchase if thats possible.
If not, RMA the unit and let them know that other routers seem to work and tested. If you do the RMA, I would by a different router, say from Best Buy or Frys, something that has a 30 day or longer full refund return policy and see if it will work better while you wait for the RMA to return. IF you do the RMA I would detail your settings do they know what to fix or look for. Not sure what else to offer here. Seem there is an issue with FW. DLink needs to know about this.
-
sesca is working on this for me so hopefully we'll know a bit more soon. They are using a 628 with my config file. Pretty happy with the efforts of you guys. Thanks much!
-
Glad to hear. Keep us posted and hope they can figure out what the problem is. :)
-
Here was what we eventually did:
I sent sesca a copy of the config with MAC controls off. Here is what he said he had to do:
"I did nothing more than rebuild it(the config file). Reset the router to defaults and reconfigured it. Although it should be fine, I think that it may have been loading the previous config after the firmware upgrade. Just a guess though."
I did save the config from the router prior to updating the firmware, which is suggested by D-link and then loaded that one under the new firmware. Maybe it didn't like that. Not sure.
At any rate, it seems to be working fine.
For anyone else reading this and having problems, you may just want to reset your router to the factory default and then manually input your settings from scratch.
-
Good to hear that you found the resolution. I hoped that the saving of the config file would have not been corrupt however I have seen in few instances of this occurring. Even on my 4500. I wonder if it has to do with the browsers themselves not saving the data correctly. What browser did you use to save your config file?
Well good knowledge. Hope it works well for you. I suppose you could save off your config now that everything is set up well.