URL blocking per device ?

[Prasad1337]

I noticed the firewall has the ability to block specific URLs but for the entire network. Is there any way I can achieve this for specific devices without using something like DNS filtering or openVPN ?


Thanks and kind regards
Prasad

 

[redhat27]

You can try to handcraft some iptables rules like:

# Block example.com from specified devices
iptables -A FORWARD -i br0 -m mac --mac-source xx:xx:xx:xx:xx:xx -p tcp -d example.com -j DROP # Substitute device1's MAC for the x'es
iptables -A FORWARD -i br0 -m mac --mac-source xx:xx:xx:xx:xx:xx -p tcp -d example.com -j DROP # Substitute device2's MAC for the x'es

in /jffs/scripts/firewall-start

Note that this is not foolproof: if example.com translates to multiple IPs, this rule will not be effective.