OPNsense Forum

English Forums => General Discussion => Topic started by: guest10459 on November 18, 2015, 03:52:29 pm

Title: Block LAN IP
Post by: guest10459 on November 18, 2015, 03:52:29 pm
My son likes to spend more time on his tablet watching videos then I care for. Back in pfsense I was able to block his IP Address from accessing the Internet. However I can't seem to block his IP address via firewall rules in opnsense.

I have a two part question.
1. How do I block his IP address from accessing the Internet?
2. How can I create a schedule for this ban to be in place, say no Internet for the IP address from 10 PM to 7 AM?

Title: Re: Block LAN IP
Post by: Zeitkind on November 18, 2015, 06:04:27 pm
In short:
0. Fixed IP('s) of son's machine(s) (either with DHCP or a static IP)
1. Add a schedule (eg. 22-0 and 0-7 every day)
2. Add a firewall rule (LAN, block, source = IP of son, destination = *, proto = *, port=*) with that schedule
3. test

But, tbh, a smart son will alter its IP-adresses or change the MAC or... ^^
Title: Re: Block LAN IP
Post by: franco on November 19, 2015, 12:30:47 am
I am curious as to why it is different in OPNsense? Missing options, different screen designs or does it simply not do what it's supposed to do after configuring?
Title: Re: Block LAN IP
Post by: neo243 on November 19, 2015, 08:22:25 am
i also tried multiple rules but surfing was still possible.

wan block IPv4 TCP/udp   *   *   192.168.1.xx   *   *
lan block IPv4 TCP/udp   *   *   192.168.1.xx   *   *
also ip from client as source and destination wan adress and so on.
yes rebooted
Title: Re: Block LAN IP
Post by: Zeitkind on November 19, 2015, 10:47:53 am
I sometimes noticed, that opnsense needs some reboots after changing the configurations - it's still work in progress.. Did you reboot?
Title: Re: Block LAN IP
Post by: guest10459 on November 20, 2015, 03:52:29 am
Franco, I was able to do the blocking from the WAN section of the firewall tab on pfsense. So the experience is just different. So far I REALLY like opnsense and I have no complaints other than the wiki needs some love.