Allowing only selected devices to connect

I believe some of my family devices have a rootkit/keylogger/backdoor. After connecting to LAN using one of the phones, unknown devices connect as well. Only Mac address listed. I don't think I can explain to them simply to sell and buy a new one. My IP started to show up in unknown websites as blocked/banned. I tried mac reservation by sometimes devices could not connect to wifi. Probably bad actors change the mac to bypass Mac reservation.

Too little facts too much drama.
Do you have spare router to replace this one?
Do you have a known clean PC?
A friend who can help with those?

1 Like

I can get a screenshots/video but that just going to clear my point

Why do you think the router is the case? When I revert to default settings and configure by myself there are no unknown devices on LAN. As soon as I share password to other devices the stuff happens.

Just typing from it.

It's more family stuff then friends. Don't want to drag them in it. Besides how could they help?

So no openwrt problem?

Make a guest network for no-humans devices, add them one by one.
Cloudflare family or quad9 has some security content to hopefully paralyze parts of backdoors, but eithther way connect iots in slow pace watching for problems.

I didn't knew you can manually change device from main to guest network. I will try but I belive unknown devices just join main network after connecting to guest. I was looking for some solution like blocking any new access ton newtwork but I haven't found one(maybe there aren't any). My best bet would be now to try and check what device adds unknown and sell them.

Make new home network then move good devices there, keep others in guest (you can have dozen of those networks)

1 Like

Will try. Thanks