Allowing only selected devices to connect

uvix2g · 2025-04-05T11:23:30.317Z

I believe some of my family devices have a rootkit/keylogger/backdoor. After connecting to LAN using one of the phones, unknown devices connect as well. Only Mac address listed. I don't think I can explain to them simply to sell and buy a new one. My IP started to show up in unknown websites as blocked/banned. I tried mac reservation by sometimes devices could not connect to wifi. Probably bad actors change the mac to bypass Mac reservation.

brada4 · 2025-04-05T11:41:21.679Z

Too little facts too much drama.
Do you have spare router to replace this one?
Do you have a known clean PC?
A friend who can help with those?

uvix2g · 2025-04-05T12:09:14.259Z

brada4:

Too little facts too much drama.

I can get a screenshots/video but that just going to clear my point

brada4:

Do you have spare router to replace this one?

Why do you think the router is the case? When I revert to default settings and configure by myself there are no unknown devices on LAN. As soon as I share password to other devices the stuff happens.

brada4:

Do you have a known clean PC?

Just typing from it.

brada4:

A friend who can help with those?

It's more family stuff then friends. Don't want to drag them in it. Besides how could they help?

brada4 · 2025-04-05T12:37:58.896Z

uvix2g:

As soon as I share password

So no openwrt problem?

Make a guest network for no-humans devices, add them one by one.
Cloudflare family or quad9 has some security content to hopefully paralyze parts of backdoors, but eithther way connect iots in slow pace watching for problems.

uvix2g · 2025-04-05T14:38:33.430Z

I didn't knew you can manually change device from main to guest network. I will try but I belive unknown devices just join main network after connecting to guest. I was looking for some solution like blocking any new access ton newtwork but I haven't found one(maybe there aren't any). My best bet would be now to try and check what device adds unknown and sell them.

brada4 · 2025-04-05T14:40:25.938Z

Make new home network then move good devices there, keep others in guest (you can have dozen of those networks)

uvix2g · 2025-04-05T15:08:51.018Z

Will try. Thanks