OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: techeng27 on March 03, 2019, 06:03:55 pm

Title: Block particular site for specific devices.
Post by: techeng27 on March 03, 2019, 06:03:55 pm
Hi All,

Okay so ive been doing some research and everyones anwser tend to be to block a website for an entire network.

What I want to do is block youtube.com for 2 of my devices on my guest network.

So I have 2 tablets my children use and I want to block youtube for those 2 devices ONLY.
I could do this on my last firewall and ive used OPNSense for quite a while but canot find any way to do this that isnt a 'network wide block'.

Im thinking my only option is to create a dns server on my guest network, and route all traffic from youtube to 127.0.0.1 or something similar, then, then specifiy that dns server IP in the 2 devices I want to block.

Hope that makes sense and hopefully someone has another idea thats quicker.

Thanks in advance!
Title: Re: Block particular site for specific devices.
Post by: hbc on March 03, 2019, 06:32:06 pm
Why not just use static DHCP assignments for those two devices, create an alias with both ips and then use this alias in a firewall rules as source?
Title: Re: Block particular site for specific devices.
Post by: techeng27 on March 04, 2019, 07:16:24 am
Quote from: hbc on March 03, 2019, 06:32:06 pm
Why not just use static DHCP assignments for those two devices, create an alias with both ips and then use this alias in a firewall rules as source?

I did try this but it didn't work... added YouTube.com and m.youtube.com as an alias, told the 2 devices (also in alias) to block any protocol to them.
E.g. block 》source (tablets) 》 protocol any 》destination (youtube).

However It doesn't work.
Title: Re: Block particular site for specific devices.
Post by: hbc on March 04, 2019, 02:35:55 pm
Hmmm,

did you try
?

Block http, https (443/tcp), QUIC (443/udp)