domain blocking question

[eddiec]

Hi, I have an RT-AC68U with merlin firmware 374.43_2-11E1j9527. I'd like to block several domains from a particular device that accesses my router via wi-fi. I am not sure how to do this. I am able to do it with OpenDNS.com but I haven't been successful with my router which I rather use since it's powered on 24/7. I tried simply inputting the domains in the firewall URL filter but my device still gets through.

Here are the domains I'd like to block. Can this be done via the GUI? Thanks.

Spoiler: domains

nus.cdn.c.shop.nintendowifi.net
nus.cdn.shop.wii.com
nus.cdn.wup.shop.nintendo.net
nus.wup.shop.nintendo.net
nus.c.shop.nintendowifi.net
c.shop.nintendowifi.net

 

[ColinTaylor]

The firewall URL filter won't work because the device won't be using http. Being shopping sites they're probably using https or an encrypted non-standard port.

Does it have to be just that one device you want blocked, whilst other devices can still connect? If you don't mind blocking all devices on your network then the simplest solution might be to create a hosts.add file (https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files) and redirect those hosts to 0.0.0.0 or 127.0.0.1. It's the same technique used for ad-blocking.

 

[eddiec]

Thanks for your reply Colin. I just need it for the one device.

I've seen some posts here saying you can add entries manually to DNSMasq using a custom jffs entry but this is way beyond my understanding.

 

[ColinTaylor]

Thanks for your reply Colin. I just need it for the one device..

I know you need it for just one device, but it's simpler to block it for the whole of your network rather than just one device.

I've seen some posts here saying you can add entries manually to DNSMasq using a custom jffs entry but this is way beyond my understanding.

There is no friendly way of doing what you want in the web interface. Whatever technique you use will require:

1) Enabling the jffs partition (Administration > System > Persistent JFFS2 partition)
2) Enabling ssh logon (Administration > System > Miscellaneous)
3) Creating a config file in the jffs partition. If you're not competent with editing Linux files from a command line you could use a free tool like WinSCP to do it from the comfort of Windows.