Menu
What's new
By:
Filters Better Search

Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. T

    vi edit /jffs/scripts hang

    It seems like some kind of memory issue. I was experiencing hang even with pure putty login. I finally got it to work after a reboot.
  2. T

    vi edit /jffs/scripts hang

    I am connecting to the router from another linux box under screen. I tried to ssh via putty directly, so the TERM is xterm, and then tried nano, it now seems to hang with a status text at bottom says "Reading File". I also noticed that whenever I try to tab complete command on shell, the ssh...
  3. T

    vi edit /jffs/scripts hang

    When I tried nano, I got this error: Error opening terminal: screen.
  4. T

    vi edit /jffs/scripts hang

    I was editing script /jffs/scripts/firewall-rule. It is RT-AC3200, asuswrt-Merlin firmware version 384.13_2
  5. T

    vi edit /jffs/scripts hang

    Recently I am unable to edit script /jffs/scripts using vi. I can launch the editor with the script, and make changes, but when I try to save and quit (:wq) or quite without save (:q), it will just hang. Any idea what might be causing this? Thanks
  6. T

    Disable internet access via command line

    I tried turn on keyword and URL filtering, it seems works fine with my internet blocking rule specified via /jffs/scripts/firewall-start. So it is really just the parental control rule that is interfering with this customized internet blocking firewall rule.
  7. T

    Disable internet access via command line

    It turns out that it works as expected after turning off parental control and keyword filtering. It would be interesting and helpful to understand how does parental control and keyword filtering interfering with the script configured iptables rule for blocking WAN access for a specified time period.
  8. T

    Disable internet access via command line

    Parent control was not quite effective as it can be worked around by mac address spoofing. Would it simplify the issue if I don't use parental control? @ColinTaylor I will PM you the unedited complete iptables-save output. Would appreciate if you can help take a look.
  9. T

    Disable internet access via command line

    does make this specific iptables rule show up in the firewall rules output. Here is the output (omitted more similar rows for different days and mac addresses): So the service-start script does make this rule into the firewall list. Still need to figure out why it continues to block internet...
  10. T

    Disable internet access via command line

    @ColinTaylor Should /jffs/scripts/firewall-start be triggered by firewall start? I edited this file with the following contents then issued this command But the rule is not showing up in the output of . Or iptables-save only show rules that are currently in effect (thus not showing when it is...
  11. T

    Disable internet access via command line

    I understand this issue. I can move the timestart earlier or disable hardware acceleration. But the issue for me now is that the internet blocking continues to be in effect even after the specified timestop, that completely defeats the desired blocking time period.
  12. T

    Disable internet access via command line

    So to achieve the goal of blocking internet connection, either -j DROP or -j REJECT would work. But what's the difference between -i br0 vs -o $(nvram get wan0_ifname)? It still puzzles me why would the time range does not work as expected (The rule does kick in at the timestart (UTC), but the...
  13. T

    Disable internet access via command line

    iptables uses UTC by default, so I adjusted the time to use UTC timestamp. The firewall rule is effective in blocking internet traffic, but it blocks internet traffic even after the specified period. Do I need to do anything else to refresh the firewall rules at the beginning and end of the...
  14. T

    Disable internet access via command line

    It seems my iptables rule are also removed by some other job or software. So is the authorized keys that I added for passwordless ssh login. The router was not rebooted while those happens. So there appear to be some job that is refreshing iptables from content on disk, and also overriding...
  15. T

    Disable internet access via command line

    @ColinTaylor that could be it. I will try the `cru` command in services-start script. @eibgrad Thanks. I will try iptables without days parameter as well.
  16. T

    Disable internet access via command line

    Also, I tried to schedule this as cron job on the router itself, but it seems that the openvpn service installed a cron job that checked and re-enabled wan every 2 minutes: */2 2-23 * * * /etc/openvpn/server1/vpns-watchdog1.sh #CheckVPNServer1# 30 00 * * * /sbin/service stop_wan #stop wan# 00...
  17. T

    Disable internet access via command line

    Thanks. That works well.
  18. T

    Disable internet access via command line

    I tried to disable internet access via command line using the following command: nvram set wan_enable=0 nvram set wan0_enable=0 nvram commit But it does not work, because internet is still accessible after the above command. Any suggestion what I am doing wrong? Thanks
Top