Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[roshambo]

I've searched the forums but couldn't find an answer to this, so please forgive me if this has already been resolved.

For some reason I can't get Access Control/Webaccess Filters working on my Dir-655 w/ 1.35NA.  I've tried it with MAC and IP Address without any success.  I've also enabled/disabled/enabled DNS Relay, recreated the rules,  recreated the filters, etc.  Nothing.

Does this work? 

[Sammydad1]

DNS relay Must be on...save & reboot....

You likely also need to set up a schedule, if you want your controls active other than On or Off....

I just followed the wizard to set up my control policies....Save & Reboot

[marmoduke]

Remember that the "websites" filter acts on keywords, not URL's.

Do not enter URLs or complete site addresses for your filter to process, just keywords.  For instance, to block www.bloodfighting.com enter only bloodfighting, nothing else.  Some recommendations for your list are:

google-analytics
free
casino
spy
winner
gift
sextracker
Rolex
deals
advertise


You get the idea.

[roshambo]

@Sammydad1:  DNS Relay has been toggled/rebooted many times.  No help either way.  It is currently on.

@marmoduke:  I'll give keywords a try.  The help file clearly states for partial URL (google.com will also get mail.google.com, do not use http://google.com, etc)  I will try using keywords and reply back.

Thanks!

[roshambo]

I just tried keywords with no luck.  It lets them through regardless of the site chosen.  Has anyone else had any issues with this?

[marmoduke]

If you did as Samidad said and used keywords then the fault has to be in how you did your "rules".  Double and triple check them...or better yet, rewrite them from scratch, and be sure that you "enable" both your "site control policy" (block some access/specific machines by IP or other) and your access control box is checked.


Website filter=Deny Access

I'll bet your rule is incorrectly written.

[roshambo]

I've tried everything as suggested.  I reset the router settings to default, reloaded the firmware and then manually setup the router rather than using a saved configuration.  So far, everything is fine.

When I go to setup Access Control I enable Access Control and then add a policy.  The policy has a simple name and mac address of my android phone.  It is always on and set to block all access (filters aren't working).  I then restart the router to confirm the settings have loaded fresh.

Now, when I go to my device it accesses the internet just fine.  I haven't even re-tried the filters yet since it won't even block general access.

What am I missing?

[marmoduke]

As a diagnostic tool try the following, in any order you wish.

1.  Go into router status/wireless and observe the MAC address reported to your router by your phone, make a note of it and use it exactly to formulate your rule.  Also note the "mode" of the phone and make sure you have router set to communicate with that mode exactly.

2.  Make an identical rule, only not for your phone, for a basic workstation.  Try MAC, IP etc and see if the router is really working or not, just don't use your phone.

Hope this analysis helps.

[roshambo]

Thank you.

I've done that with no help.  I've copied the MAC address from the phone into a rule in the format showing up in the logs and as it appears on the phone (with or without dashes) and no help.  I've also confirmed the MAC be detected by the router is accurate...and it is.

I think I found the caveat, please tell me if this is an issue.  I do NOT have DHCP enabled.  Instead I am using DHCP from my FIOS router.  The D-Link is strictly for wireless and anything else wired to it.  All traffic flows to and then through the FIOS router.  Here's the setup:

Internet -> FIOS (DHCP) (cable boxes, xbox, d-link) -> D-Link (manual IP from the FIOS range, wireless, desktop, printer, NAS)

I set it up this was because the FIOS apps require to be on the same network as the cable boxes for access to the DVR and remote control and the wireless on the FIOS sucks and is about half the speed ( I think they have it limited) as the D-link.

I assumed that the MAC and IP address could be detected just fine by D-Link and didn't need to be in issued by them.  Does it need to be in their table before it can be managed?  If so, how can I add this without having it come from D-Link?

As you can tell I'm a bit new at this - sorry if this is a basic question.

[davevt31]

Where are the computers getting their IPs from?  If its from the FIOS router that is probably the problem as the communications is being handled by that.  If they are manual, do you have the Dlink set as the DNS server?   The other problem you will run in to is that you will have a Double NAT situtaion because of the two routers and that can cause all sorts of headaches.

[binaryhat]

Webaccess Filter/Access Control Doesn't work properly for me too.  If I choose block all access for a machine, that works.  However if I  block some access and tick Apply Advanced Port Filters.  I would only block cnn.com and put 157.166.255.19 as my Dest IP Start and Dest IP End.  It does not work.  Ideas?

[FurryNutz]

Have you set up a schedule first? You have to set up a schedule first. I would reserve the IP addresses first off, then set up a schedule, then set up the access control and web access filter. Let us know.

Webaccess Filter/Access Control Doesn't work properly for me too.  If I choose block all access for a machine, that works.  However if I  block some access and tick Apply Advanced Port Filters.  I would only block cnn.com and put 157.166.255.19 as my Dest IP Start and Dest IP End.  It does not work.  Ideas?

[binaryhat]

Followed your advice and it works.  Thanks.

[FurryNutz]

 

[Sammydad1]

Mentioned setting up a schedule back on August 30th...