D-Link Forums
The Graveyard - Products No Longer Supported => Routers / COVR => DIR-655 => Topic started by: roshambo on August 29, 2011, 02:35:24 PM
-
I've searched the forums but couldn't find an answer to this, so please forgive me if this has already been resolved.
For some reason I can't get Access Control/Webaccess Filters working on my Dir-655 w/ 1.35NA. I've tried it with MAC and IP Address without any success. I've also enabled/disabled/enabled DNS Relay, recreated the rules, recreated the filters, etc. Nothing.
Does this work? ???
-
DNS relay Must be on...save & reboot....
You likely also need to set up a schedule, if you want your controls active other than On or Off....
I just followed the wizard to set up my control policies....Save & Reboot
-
Remember that the "websites" filter acts on keywords, not URL's.
Do not enter URLs or complete site addresses for your filter to process, just keywords. For instance, to block www.bloodfighting.com enter only bloodfighting, nothing else. Some recommendations for your list are:
google-analytics
free
casino
spy
winner
gift
sextracker
Rolex
deals
advertise
You get the idea.
-
@Sammydad1: DNS Relay has been toggled/rebooted many times. No help either way. It is currently on.
@marmoduke: I'll give keywords a try. The help file clearly states for partial URL (google.com will also get mail.google.com, do not use http://google.com, etc) I will try using keywords and reply back.
Thanks!
-
I just tried keywords with no luck. It lets them through regardless of the site chosen. Has anyone else had any issues with this?
-
If you did as Samidad said and used keywords then the fault has to be in how you did your "rules". Double and triple check them...or better yet, rewrite them from scratch, and be sure that you "enable" both your "site control policy" (block some access/specific machines by IP or other) and your access control box is checked.
Website filter=Deny Access
I'll bet your rule is incorrectly written.
-
I've tried everything as suggested. I reset the router settings to default, reloaded the firmware and then manually setup the router rather than using a saved configuration. So far, everything is fine.
When I go to setup Access Control I enable Access Control and then add a policy. The policy has a simple name and mac address of my android phone. It is always on and set to block all access (filters aren't working). I then restart the router to confirm the settings have loaded fresh.
Now, when I go to my device it accesses the internet just fine. I haven't even re-tried the filters yet since it won't even block general access.
What am I missing?
-
As a diagnostic tool try the following, in any order you wish.
1. Go into router status/wireless and observe the MAC address reported to your router by your phone, make a note of it and use it exactly to formulate your rule. Also note the "mode" of the phone and make sure you have router set to communicate with that mode exactly.
2. Make an identical rule, only not for your phone, for a basic workstation. Try MAC, IP etc and see if the router is really working or not, just don't use your phone.
Hope this analysis helps.
-
Thank you.
I've done that with no help. I've copied the MAC address from the phone into a rule in the format showing up in the logs and as it appears on the phone (with or without dashes) and no help. I've also confirmed the MAC be detected by the router is accurate...and it is.
I think I found the caveat, please tell me if this is an issue. I do NOT have DHCP enabled. Instead I am using DHCP from my FIOS router. The D-Link is strictly for wireless and anything else wired to it. All traffic flows to and then through the FIOS router. Here's the setup:
Internet -> FIOS (DHCP) (cable boxes, xbox, d-link) -> D-Link (manual IP from the FIOS range, wireless, desktop, printer, NAS)
I set it up this was because the FIOS apps require to be on the same network as the cable boxes for access to the DVR and remote control and the wireless on the FIOS sucks and is about half the speed ( I think they have it limited) as the D-link.
I assumed that the MAC and IP address could be detected just fine by D-Link and didn't need to be in issued by them. Does it need to be in their table before it can be managed? If so, how can I add this without having it come from D-Link?
As you can tell I'm a bit new at this - sorry if this is a basic question.
-
Where are the computers getting their IPs from? If its from the FIOS router that is probably the problem as the communications is being handled by that. If they are manual, do you have the Dlink set as the DNS server? The other problem you will run in to is that you will have a Double NAT situtaion because of the two routers and that can cause all sorts of headaches.
-
Webaccess Filter/Access Control Doesn't work properly for me too. If I choose block all access for a machine, that works. However if I block some access and tick Apply Advanced Port Filters. I would only block cnn.com and put 157.166.255.19 as my Dest IP Start and Dest IP End. It does not work. Ideas?
-
Have you set up a schedule first? You have to set up a schedule first. I would reserve the IP addresses first off, then set up a schedule, then set up the access control and web access filter. Let us know.
Webaccess Filter/Access Control Doesn't work properly for me too. If I choose block all access for a machine, that works. However if I block some access and tick Apply Advanced Port Filters. I would only block cnn.com and put 157.166.255.19 as my Dest IP Start and Dest IP End. It does not work. Ideas?
-
Followed your advice and it works. Thanks.
-
;)
-
Mentioned setting up a schedule back on August 30th...
-
Where are the computers getting their IPs from? If its from the FIOS router that is probably the problem as the communications is being handled by that. If they are manual, do you have the Dlink set as the DNS server? The other problem you will run in to is that you will have a Double NAT situtaion because of the two routers and that can cause all sorts of headaches.
Does that mean that you cannot use the access control option when the DIR655 is configured as an Access Point?
-
There would be no need for access control options on the 655 if set up as an AP since all the traffic and management is handle by the host router.
-
Thanks for the reply. The host router only has limited possibilities for access control. (The host router is given to me by the provider and is suitable for TV, telephone and internet via glass fiber connection. The Dir655 can't be used for that. But I like to use the access control options of the Dir655, thats why a configured as an access point))
-
Does the Host router have a DMZ by chance? You could put the 655 in the DMZ of the host router then use the 655 as a router and not an AP.
-
The host router has a very limited set of settings (or they are hidden). I can only set the SSID name, channel number and the security stuff . There is no DMZ option.
-
I have had the same issue on my DIR 655 with 2.03NA firmware.
I set up the Website filter, and then enabled the Access Control via MAC address. Though when I enter a specific URL entry in the website filter I notice it cuts off the last few words of it. In my case, I input the following entry, app.boxee.tv/chkupd/dlink.dsm380 and then it only saves app.boxee.tv/chkupd which is probably why my filter isn't working.
In reading this thread, it sounds like I just have to use key words? I'm trying to block access on my Boxee Box from auto updating, part of another issue altogether I might as the forum for help here.
So will the filter work if I just input chkupd/dlink.dsm380?
-
Ya I think you have to use key words. Have you set up a schedule for the Access Control as well? Not sure if this is a requirement or not.
Not sure if you can turn off the boxee update or not. I have one and just let it do it's thing.
Maybe someone can review your router settings using teamviewer.com (http://teamviewer.com) with you too.