Block internet by IP and tme ver 2.3
-
ok so i'm trying to just do the block part and i can even get that working..
the device can still get to the internet even with the state type to none and resetting states.
-
Your rules order is wrong ;)
https://doc.pfsense.org/index.php/Firewall_Rule_Basics
https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order
https://doc.pfsense.org/index.php/Firewall_Rule_Troubleshooting
-
thanks. ppt..
i moved it up reset states and now it works kinda.. if i go to a site i havent been before it will time out. but some apps and web still work for eg google.com still works and i can search and click on the link but the link may or may not open..
i do have squid so i dont know if somehow the caching is affecting the block
-
Why do you have squid?
-
i was reading about popular addons and was testing out its caching abilities to speed up browsing.
edit: on the main LAN rule to allow should i change the state type to none?
-
no
Unless you REALLY need caching, squid generally does more harm than good.
-
i just dont understand why the firewall isnt firewalling.. my old linksys RV042 was soo easy to block and by time but its 10/100 ports are throttling me.
![access rules old.JPG](/public/imported_attachments/1/access rules old.JPG)
![access rules old.JPG_thumb](/public/imported_attachments/1/access rules old.JPG_thumb) -
So you post an RV042 screen? That'll help.
-
sorry i was just hoping for a similarly easy way to block
is there anything else i can post to make it easier to troubleshoot?
-
You may be seeing cached content from either squid or your browser. Do what Derelict said. Create a schedule time that access is allowed. Create a LAN rule to allow access for the required IP address with your schedule. Immediately below that rule, create a block rule for the same IP address but no schedule. Clear states and test.
-
i'm using my iPhone to test wanted to take it one step at a time to was just testing the block, but that wasnt working..
i removed SquidGuard then Squid and rebooted..
then tried the block.. and same results.. some sites are blocked and some still allowed..
then i made a rule for the pc i'm on see screenshot then reset states and about the same thing.. some sites work i can relaod get new items like on facebook but anything new it wont load.
edit: i even posted that^^ and this while the pc block was in effect and it worked.. :/
-
I am not sure what what is so hard understand here..
Create a rule that allows your traffic for the schedule you want.. Then below that create a block for that IP.. Its really that simple!!
You are trying to block on a schedule.. But not blocking ipv6.. You have a any rule for IPv6.. You do understand browser caches right?
-
i understand, but like i said before i'm just trying to take the process one step at a time and i'm just testing the total block part.. and after getting that working i'll do the allow.
it wasnt the cache on the browser, i was getting new posts about walking dead for eg from facebook and also pulling other feeds and instagram from the mobile tester and also email notifications about posts on this thread.and you've mentioned IPV6 could that be it? i'm gonna disable IPV6 internally, i'll report back.
-
I don't know could it ;) You have a any any rule for it..
The proper use of the schedules is for allow time.. So create a rule that allows the traffic to your schedule, then after that rule there should be a specific deny if that allow rule on your schedule is not the last rule.
-
Why not just install a timer that turns off the electricity?
-
If you wanted to test block then test block.. Why did you have a schedule set on your block rule?
Put in your block.. Clear you states, then for sure that IP is blocked NO internet for it… Then create a allow rule on the schedule you want and put above the block rule.. Unless you turn the feature off, it will clear the states when the schedule stops.
This really is like 10 seconds to setup.
-
ahhhh epic frigging facepalm!!! so i disabled the the IPv6 allow rule then turned off IPv6 dhcp server, released and renewed IP and everything finally blocked..
it was right in front of my face if it was a snake it could of bitten me.
now i can test the schedule
@derelict that would be hard on the spinning disk and defeatus on mobile devices.
@johnpoz initially it was for a schedule.. but after getting the advice on how to i wanted to take it one step at a time, if not i would of still had an IPv6 crack. -
Then schedule the WAP to shut off the SSID.
Not sure what people are going to do when their devices are changing IPv6 addresses deliberately and constantly.
-
Is there a way to create schedules by just time? Or to use wild cards to include all months and like day of week?
-
Click the week day header to select all occurrences that day like it says in the text there.