Block LAN IP

[guest10459]

My son likes to spend more time on his tablet watching videos then I care for. Back in pfsense I was able to block his IP Address from accessing the Internet. However I can't seem to block his IP address via firewall rules in opnsense.

I have a two part question.
1. How do I block his IP address from accessing the Internet?
2. How can I create a schedule for this ban to be in place, say no Internet for the IP address from 10 PM to 7 AM?

[Zeitkind]

In short:
0. Fixed IP('s) of son's machine(s) (either with DHCP or a static IP)
1. Add a schedule (eg. 22-0 and 0-7 every day)
2. Add a firewall rule (LAN, block, source = IP of son, destination = *, proto = *, port=*) with that schedule
3. test

But, tbh, a smart son will alter its IP-adresses or change the MAC or... ^^

[franco]

I am curious as to why it is different in OPNsense? Missing options, different screen designs or does it simply not do what it's supposed to do after configuring?

[neo243]

i also tried multiple rules but surfing was still possible.

wan block IPv4 TCP/udp   *   *   192.168.1.xx   *   *
lan block IPv4 TCP/udp   *   *   192.168.1.xx   *   *
also ip from client as source and destination wan adress and so on.
yes rebooted

[Zeitkind]

I sometimes noticed, that opnsense needs some reboots after changing the configurations - it's still work in progress.. Did you reboot?

[guest10459]

Franco, I was able to do the blocking from the WAN section of the firewall tab on pfsense. So the experience is just different. So far I REALLY like opnsense and I have no complaints other than the wiki needs some love.