Help block certain domain with certain MAC address client via DNS

For a phone, turn airplane mode on and off. For a PC, turn WiFi off and on.

1 Like

Awesome expertise, I seems to work as expected, you're so genius.
I have one more question:

How can I run force DHCP lease from the router instead of turning off/on from my client devices?

You would need to restart the LAN interface on the router. I think that should work.

1 Like

so an awesome expert!!!!
Warmly thank you so much~~

hi expert @dave14305

when I use 5GHz, it runs well for the block domain as we expected.

However, when I use 2GHz, it does not block the domain as we expected. Could you please advise me?

thank you so so much

Does the phone use a different random MAC address on 2.4Ghz?

I don't think so expert, I checked with the Luci page of the device, the MAC address is correct

Maybe it’s using IPv6 instead of IPv4 sometimes?

I think it is not IPv6, or I'm not sure for this case.

In addition, I faced another problem when I restarted the network from the router by /etc/init.d/network restart the 5GHz did not work. it seems unstable for connection, based on your expertise, could you please advise to me?

Warmly thank you so much~~

dear Experts! @dave14305 @vgaetera @frollic @krazeh
Could you please advices to me, I'm still facing with problem 2GHz, I cannot block by certain MAC while 5GHz it is work as I expected.
The below is my configuration of 2GHz and 5GHz:

config wifi-device 'radio0'                                                                                                                                                                                                                          
        option type 'mac80211'                                                                                                                                                                                                                       
        option channel '11'                                                                                                                                                                                                                          
        option hwmode '11g'                                                                                                                                                                                                                          
        option path 'platform/10300000.wmac'                                                                                                                                                                                                         
        option htmode 'HT20'                                                                                                                                                                                                                         
        option disabled '0'                                                                                                                                                                                                                          
                                                                                                                                                                                                                                                     
config wifi-iface 'default_radio0'                                                                                                                                                                                                                   
        option device 'radio0'                                                                                                                                                                                                                       
        option network 'lan'                                                                                                                                                                                                                         
        option mode 'ap'                                                                                                                                                                                                                             
        option ssid 'Tony_2G'                                                                                                                                                                                                                        
        option key 'root1234567890'                                                                                                                                                                                                                  
        option encryption 'psk2'                                                                                                                                                                                                                     
                                                                                                                                                                                                                                                     
config wifi-device 'radio1'                                                                                                                                                                                                                          
        option type 'mac80211'                                                                                                                                                                                                                       
        option channel '36'                                                                                                                                                                                                                          
        option hwmode '11a'                                                                                                                                                                                                                          
        option path 'pci0000:00/0000:00:00.0/0000:01:00.0'                                                                                                                                                                                           
        option htmode 'VHT80'                                                                                                                                                                                                                        
        option disabled '0'                                                                                                                                                                                                                          
        option cell_density '0'                                                                                                                                                                                                                      
                                                                                                                                                                                                                                                     
config wifi-iface 'default_radio1'                                                                                                                                                                                                                   
        option device 'radio1'                                                                                                                                                                                                                       
        option network 'lan'                                                                                                                                                                                                                         
        option mode 'ap'                                                                                                                                                                                                                             
        option ssid 'Tony_5G'                                                                                                                                                                                                                        
        option key 'root1234567890'                                                                                                                                                                                                                  
        option ieee80211w '2'                                                                                                                                                                                                                        
        option encryption 'sae'                                                                                                                                                                                                                      
                                 

warmly thank you so much~~

same client device using the 2.4 and 5GHz radio ?

Dear experts!!!

After look around I found your solutions with intercept DNS can work well with both 2G 5G for clients only have ipv4 address.


the below is setting block by Intercept DNS

However, when I see the clients also assign with IPv6 address, it is not work for block from that target MAC address.

Base on your expertise, could you please advice to me how can block access from client "Tony-s-Note10.lan (192.168.1.109, fe80::f834:26ff:febc:6209)"

Warmly thank expertise so much @dave14305 @vgaetera @frollic @krazeh

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.