Block ports for specific ip on LAN

Installing and Using OpenWrt Network and Wireless Configuration
1

I can't seem to figure this out...

Adding a discard forward rule in traffic rules does not work. Also tried adding the following as well to /etc/firewall.user;
iptables -I FORWARD -d 192.168.123.55 -p tcp/udp --dport 0:65535 -j DROP

2

Try -s instead of -d.

3

Thanks, doesn't work... I don't seem to be able to block anything on LAN

4

You can't block something that doesn't traverse the firewall.

Use LuCI to explicitly block zones LAN to WAN in order to test.

4 Likes
5

Thanks for this.. Yes, makes sense.