Block only one IP address

[Joergi]

Hello forum,
I have an AV-Receiver with web interface (192.168.2.22).
I can't disable or protect the web interface in the Receiver.
Is there an opportunity to block the IP address in the AC87U router (380.58),
that I can’t open the web interface.
I tried it with the firewall network services filter, but did not work.

 

[john9527]

Don't use 'TCP ALL'...just use 'TCP'. TCP ALL isn't what the name would imply and is actually a pretty useless option (I've removed it in my fork).

 

[Joergi]

Hello john9527,
I try it, but it's the same.
I can open the web interface.

 

[RMerlin]

You can't firewall LAN traffic between two devices, since that traffic is switched, not routed. It never reaches the firewall.

 

[john9527]

Merlin just beat me with the answer....I must be sleepy this AM.....
The Network Services filter is for blocking traffic going from your LAN to the WAN.

 

[Joergi]

No chance to block, like the web interface of the router (Web Interface -> Specified IP address (Max Limit : 4))?

 

[john9527]

No, no chance sorry. That function has to be provided by the receiver..
I don't know what brand receiver you have, but my Yamaha has a 'mac filter' function for access to the receiver (although I've never used it).

 

[Joergi]

Can I maybe deactivate the used hardware switch port (telnet)?

 

[Joergi]

Info:
I changed the connection of the receiver to WLAN (receiver has both LAN/WLAN).
I created a new Guest Network for the receiver.
Now I can enable/disable the access to the web interface via Access Intranet.