block specific website on one device using merlin when using dnsmasq already

[corporate_gadfly]

Hi all,

Long time reader (first time poster). I have an RT-AC1900P running merlin 384.14. I currently use /jffs/configs/dnsmasq.conf.add for some DNS redirection for a few domains (I have a few address= lines). I don't think I currently use entware or pixelsrv-tls. dnsmasq was my only foray outside of the GUI.

I would like to block youtube on an LG TV with my above setup. I have done a lot of google searches and haven't landed on anything, with confidence, which would fix this issue. The LG TV is rather old and the tile for youtube is not removable.

Is iptables my best bet? Looking for a not-so-complex solution. Thanks in advance.

 

[corporate_gadfly]

Situation was getting a little desperate. So I watched active connections from:

• System Log -> Connections

and then watched traffic from the LG TV.
Then I went to:

• Firewall -> Network Services Filter
• Made sure to enable network services filter
• Added the following in the filter table (based on active connections that I observed).

Following shows up in the iptables -L -n output:

Chain NSFW (2 references)
target     prot opt source               destination        
DROP       tcp  --  192.168.1.254        172.217.0.0/16       tcp dpt:443
DROP       tcp  --  192.168.1.254        206.248.151.146      tcp dpt:443
DROP       tcp  --  192.168.1.254        74.125.0.0/16        tcp dpt:443
RETURN     all  --  0.0.0.0/0            0.0.0.0/0

End result is that the tile refuses to load and dumps the user back to main menu.

Hope this helps someone.