Block instagram for two devices

[bilboSNB]

On the basis I already use opendns set as the routers dns server and use dnsfiltering to force all devices to use the router for dns and I use dnsmasq on the router for certain things.

What would be the best way that fits in with this to block instagram for two devices? I am thinking a fire wall rule.

 

[dubbedout]

You can add specific domains to block within OpenDNS. That would be the easiest way to block Instagram. You would probably have to use a separate DNS for the other devices on the network though, if you wanted to allow Instagram access on other devices.

 

[bilboSNB]

I've just gone with

iptables -I FORWARD -s 192.168.0.2 -d  instagram.com -j DROP

Not exactly elegant but it works. Probably a dynamically updating ipset rule would have been better.

 

[RMerlin]

I would change the jump target for this:

-j REJECT --reject-with tcp-reset

That way, the connection will immediately be rejected, rather than getting stuck for 30-60 secs.