Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[woodsptw]

A lot of the instructions/directions are about how to port forward and "allow all".  There may be an issue in the automatic options provided regarding "deny all" for WoW. WoW was not blocked by just selecting the WoW port options that were automatically populated and then choosing "Deny All".  The short answer is (I think) just add 3274 to the UDP selection in addition to the TCP ports that are automatically added.

Here's the background:

I needed to block WoW at certain times during the week (to ensure my son has the opportunity to study).

The new features on the DIR-655 are pretty powerful.

I've done 2 things to block WoW - I'm assuming the first is what took care of it - but until I can check here's what I did:

Go to Settings, Network Setting (scroll down to add DHCP Reservation):
* select "enable" and select the "computer name" that is used to play WoW

Go to Advanced, Port Forwarding:
* use the pull down for "application name" and select "World of Warcraft" and press the <<
* use the pull down for "computer name" and select the computer name from above and press <<
* everything is automatically populated - very cool!
* add 3274 to the UDP port field and select "Deny All"

I think that should do it. I should mention that I also added Warcraft III and did Deny All for that same computer. I don't know if there is something to that step. I did this change at the same time I added 3274 UDP in the "Deny All" so I'm not sure. 

I also realized that going to Tools, Schedules - will let you establish different time periods than  "always" and "never". What you select shows up in the pull downs on the other screens. Very cool.

Hope this helps!

[woodsptw]

Okay - I guess I lied. Those steps above did not actually work. I'm not sure why it doesn't (hey DLink?).  I guess when I asked my son if it worked - the PC must not have reconnected.

After lots of hacking around, I gave "Access Control" a try (under "Advanced").

The wizard is pretty straight forward.

Step 3 - I selected the MAC address of my son's computer
Step 4 - I chose "Block Some" and checked boxes for Apply Web Filter and Apply Advanced Port Filters.

Step 5  Port Filter - I checked 'Enable', gave it a name "WoW Port" and left the Dest IP Start and End as is (0.0.0.0 to 255.255.255.255), picked TCP as the protocol and  put 3724 in the Start and End for Dest Port.

That should do it.

I did also set up a "Schedule" and apply it. I set it for 2PM to 7am Sunday through Thursday. I haven't yet tested if that will do the times I think.  Changing the schedule itself does not cause the router to reboot which is pretty convenient.

Reboot the router and for those sessions still active when the scheduled time frame starts, to end the session, reboot the router and or the PCs. This will stop the existing sessions should they still be active during the schedule time frame when gaming isn't allowed.

[Fatman]

keep in mind that sessions open at the start of that schedule will not be interrupted.

This means that even with the perfect configuration you will still see the below.

You can play WoW from 1:30 to 3:00 on a Sunday afternoon (successfully, despite your schedule starting at 2:00PM), take a break and find you can't get back in.  As long as you have that connection open it can last as long as you like

[ifm12009]

Fatman,

keep in mind that sessions open at the start of that schedule will not be interrupted.

This also applies to any scheduled blocks setup for any of these routers (Eg. Website and etc…).  This is a very big and unacceptable security hole!  Rendering any form of “Access Control” virtually unusable!

Regards,

[Sammydad1]

Hi,

You may need to enable DNS RELAY in-order for schedules to work, if it works the same as Website filtering is set up...

On the other note, if what Fatman stated is accurate, that is terrible !!!  What good is a schedule, as set by US, the responsible parties, if it is ignored simply by using the connection before the schedule is activated.

MANY of us actually use the schedules to control access for our minor children and frankly anybody we deem necessary to control....GET THIS FIXED !!!!

Sd1

[Angelis83lt]

Blocking websites is easy to do with this router using the Access controls and schedules. However, I have not been able to successfully block ANY game. This includes WoW, Perfect world, Atlantis, ect ect.  The reason I think is that the blocking is using not the IP addresses, but the Domain names.  Same with unblocking certain Websites during an otherwise block all.  None of them would work until I actually used a Domain Name instead of an IP address.  Not really sure why it is doing that, But I have tried ALL options in the router without any real or working solutions.  the ONLY way to stop him from getting on the net and playing the game is to completely block ALL internet from that computer. However, interestingly enough, that may not always work as well. I have a laptop on wireless. I can plug that into a cable from another computer and use the net all I want.  The problem there is for some reason the router will not actually change the MAC address.  So it is using the MAC from the other computer as far as the router is concerned, which is allowed, even though it shows the computer name of the laptop.  That would not normally be something tested at D-link or even thought about I think. But the problem IS there.   So really, the access controls are completely useless except to turn the net completely off from a computer using a schedule.  Only thing that does seem to work.

[ifm12009]

Hi,

... However, I have not been able to successfully block ANY game. This includes WoW, Perfect world, Atlantis, ect ect.  The reason I think is that the blocking is using not the IP addresses, but the Domain names.  Same with unblocking certain Websites during an otherwise block all.  None of them would work until I actually used a Domain Name instead of an IP address. ...

Conceivable, if you were to setup port blocking directed to local workstations (via local IP or MAC) then you should not need to worry about internet IP address, Websites, nor any domain names.  I think that "woodsptw’s" first paragraph stats the situation correctly (now expand that pass his WoW issues). ...

But the bottom line is though, ALL D-Link Access Controls are rendered virtually useless based on the little known insight (the BIG security bug) stated by Fatman.  You would look like quite the fool if you told your kids they were blocked while they continue their online activates without any disruptions or effort on their part.

Regards,