Quota problem router stop

Installing and Using OpenWrt
#1

Hi there,

I have tried to set quota for some of my devices in my network
it was like that

iptables -t mangle -A OUTPUT -s 192.168.2.10 -p tcp -m quota --quota 2684354560 -j ACCEPT
iptables -t mangle -A OUTPUT -s 192.168.2.10 -j DROP

iptables -t mangle -A OUTPUT -s 192.168.2.11-p tcp -m quota --quota 2684354560 -j ACCEPT
iptables -t mangle -A OUTPUT -s 192.168.2.11 -j DROP

iptables -t mangle -A OUTPUT -s 192.168.2.12 -p tcp -m quota --quota 2684354560 -j ACCEPT
iptables -t mangle -A OUTPUT -s 192.168.2.12 -j DROP

but suddenly router stop and no internet over WIFI or ethernet and Icould not communicate to my router and I had to reset it
can any one help me what is wrong
thanks.

#2

You set a quota and it worked, what's the issue?

Do you want to reset these quotas after a time period (e.g. daily)?

#3

I have set this quota for only three devices but
not for all my devices
all devices not in the quota are stopped too

#4

You have set the rule in OUTPUT, but you want to block FORWARD?

#5

thanks for your replay can you help me fot this rules
iptables -A FORWARD -s 192.168.2.14 -m time --timestart 10:00 --timestop 20:00 -j ACCEPT

iptables -A FORWARD -s 192.168.2.14 -j DROP
i want to allow traffic from 10 am to 8 pm only
but it did not work
what is wrong in the rules
thanks.

#6

I have tired to write the rules in new way and it is worked
but i do not why
the new way rules are
iptables -A forwarding_rule -s 192.168.2.14 -m time --timestart 8:00 --timestop 8:30 -j ACCEPT
iptables -A forwarding_rule -s 192.168.2.14 -j DROP

#7

Because you added the first set of rules at the bottom and traffic was matched and allowed before reaching the time rules.

1 Like
#8

Sorry but I do not understand you
i have attached pic how the rules are

Screenshot (14)
Screenshot (14)944×504 17.7 KB

Screenshot (15)
Screenshot (15)935×94 2.73 KB

what is the wrong
thanks for your help

#9

Do a iptables-save -c -t filter and I'll show you.

#10

You were told:

I believe you want to to use the Insert argument (-I) instead of Append (-A).

See: https://ipset.netfilter.org/iptables.man.html regarding the -I and -A arguments.

1 Like