Problem with Network Services Filter

[FireWire76]

Hi.

Using: Firmware Version:3.0.0.4.354.28(Merlin version)

I have a NAS on my network that I don´t want to have access to WAN. This have worked before. But when I tested it some day ago, I noticed the block isn´t working. I haven´t upgraded the firmware or made any other changes that I can remember.
I will post an image of the network services filter settings.

I have blocked all ports and Yes, the ip is accurate and assigned in my manual dhcp settings for lan. I tried rebooting and resetting, but non of it helps. I even tested to block my computers ip, but that don´t work either.
So any suggestions why these settings doesn´t work at all? Would really appreciate some tips to solve this frustrating issue... It did work when I installed the firmware the first time. And it did work in previous versions.

Best regards,
FireWire

 

[RMerlin]

Your configuration look good to me. Try updating to the latest non-beta firmware version to see if it helps.

 

[FireWire76]

Now updated to Firmware: 3.0.0.4.374.32 and the problem still persist. The NAS on 192.168.1.102 can access internet... Any suggestions why the block doesn´t work? Really would appreciate some suggestion to solve this.

 

[FireWire76]

Suggestions anyone? Would really like some help to solve this.

 

[tullo15]

I am also trying to block wow using network services filter but get no luck. I turned off the parental control too and no luck. Do you have any luck finding the solution for this?

 

[FireWire76]

I am also trying to block wow using network services filter but get no luck. I turned off the parental control too and no luck. Do you have any luck finding the solution for this?

Network Services Filter works fine if parental control is off. By Wow you mean the game I guess?
What ports are you blocking?

Regarding the conflict between the services I have emailed Asus and hopefully they read it and take my suggestion to develop both services, so either can be used to achieve at least the basics of what you could expect from those services.

 

[Latco]

Network Services Filter (aka LAN to Wan Filter)

Apologies if I'm off-topic here. I realise this is Asuswrt-Merlin forum but from what I've read about Merlin's firmware it is concerned with improvement and bug fixes, and many other issues.

I've just posted 'RT-N56U Network Services Filter (LAN to WAN Filter) Ineffective:found Bug or Feature?'
at: http://forums.smallnetbuilder.com/showthread.php?t=12666

that might be of interest.

Please post back how you get on as I will. I regret I a have little experience on forums or of netiquette etc

latco

 

[tullo15]

Yes, I mean the game World of Warcraft. I am blocking 3724, 6112, and 6881:6999. I was able to block this on my old dlink 655 router easily. attached please check the snapshot. I disabled firewall and had no luck and the current firmware i am using is 3.0.0.4.372.31 (Merlin's build)

 

[FireWire76]

You need to set the source IP(eg your computers IP in the lan) to be able to block those ports. I don´t think the block works without it. The destination IP can be left empty.
AND Parental Control must be off or else the Network Services Filter doesn´t work.
AND you should correct the time for Monday - Friday to 00:00 - 23:59, you now have 00:00 - 23:58 which disables the rules for 1 minute every day.

 

[krum]

Suggestions anyone? Would really like some help to solve this.

This really has not worked since .220, Firewall and Parental controls seemed broken since then.

I downgraded to .220.18 merlin build
also no Drops/ range better on wireless 5g,

Chris

 

[tullo15]

I have tried that also. I just tried it again and it still doesn't work with the parental control (Off). Do you know the last known build you use which made it work? thanks for the advice brother

 

[FireWire76]

I have tried that also. I just tried it again and it still doesn't work with the parental control (Off). Do you know the last known build you use which made it work? thanks for the advice brother

I use the latest, non beta, release(3.0.0.4.374.32_0). And Network Services Filter works fine for blocking devices on computers/devices WHEN Parental Control is off. But I block all ports for those devices, because my need is to block IE access completely. And that works fine.
So if blocking of those ports doesn´t work, then either something else then Parental Control is in conflict with the NSF on your router or your game is using other ports that you haven´t blocked.
But I am somewhat confused about your blocking. Your are blocking same ports on different places and use one port locally and another externally.
Try to block:

Source IP: Portrange(Source): Portrange(External): Protocol:
192.168.1.XXX 3724 3724 UDP
192.168.1.XXX 3724 3724 TCP
192.168.1.XXX 6112 6112 UDP
192.168.1.XXX 6112 6112 TCP
192.168.1.XXX 6881:6999 6881:6999 UDP
192.168.1.XXX 6881:6999 6881:6999 TCP

 

[FireWire76]

Yes, I mean the game World of Warcraft. I am blocking 3724, 6112, and 6881:6999. I was able to block this on my old dlink 655 router easily. attached please check the snapshot. I disabled firewall and had no luck and the current firmware i am using is 3.0.0.4.372.31 (Merlin's build)

If you disabled FIREWALL, then thats the answer. The firewall is whats used to block ports.
I would NOT recommend disabling that, because then you are completely open to internet. I don´t get why you would disable the firewall, thats one of the main reasons to have a router?!
So If I were you, I would enable it quickly!
And the Network Services Filter will work too.

And one more question, are you sure about what you are doing? Is it really a BLOCK for the game you want? The normal scenario is that you might need to forward ports for certain games in case something doesn´t work as it should or if you want to run a server. So are you sure your DON`T want internet access for the game? And if so, do you have this game on several computers in the network? Or else I would suggest blocking it locally on your computer instead. Seems a bit heavy to block entire port ranges just for one game. If you are unlucky you might kill other programs access to internet too by this block.

 

[tullo15]

If you disabled FIREWALL, then thats the answer. The firewall is whats used to block ports.
I would NOT recommend disabling that, because then you are completely open to internet. I don´t get why you would disable the firewall, thats one of the main reasons to have a router?!
So If I were you, I would enable it quickly!
And the Network Services Filter will work too.

And one more question, are you sure about what you are doing? Is it really a BLOCK for the game you want? The normal scenario is that you might need to forward ports for certain games in case something doesn´t work as it should or if you want to run a server. So are you sure your DON`T want internet access for the game? And if so, do you have this game on several computers in the network? Or else I would suggest blocking it locally on your computer instead. Seems a bit heavy to block entire port ranges just for one game. If you are unlucky you might kill other programs access to internet too by this block.

my bad, I meant I disabled parental control. All I want to do is to block WoW on one device or maybe all the devices on the network (which i tried by leaving the source ip blank). Yes, I don't want the people on the network playing WoW. What I am thinking that since the NSF never worked for me with any firmware release is that it might be the hardware part which is faulty. I have one question, how do you block the internet access to a device using NSF completely? Thanks

 

[FireWire76]

my bad, I meant I disabled parental control. All I want to do is to block WoW on one device or maybe all the devices on the network (which i tried by leaving the source ip blank). Yes, I don't want the people on the network playing WoW. What I am thinking that since the NSF never worked for me with any firmware release is that it might be the hardware part which is faulty. I have one question, how do you block the internet access to a device using NSF completely? Thanks

You type the source IP. And in Port Range(both Source and destination) you type <65535, which blocks all ports to that device.

Best regards,
FireWire

 

[tullo15]

yes it made it block the internet on the device i wanted to block. Btw I changed my lan ip from 192.168.0.2 to default 192.168.0.1 before doing that. I changed it long time ago because of voip device.

 

[tullo15]

I will update on the result for the WoW block soon