How to Block Traffic Categories on Edgerouter
Вставка
- Опубліковано 14 чер 2024
- In this video I go over how to block certain traffic categories (social-media, torrents, etc.) using DPI on an Edgerouter. This video was a part of a request through toastyanswers.com.
I go over how to set this up in the GUI as well as the command line. Below are timestamps for each so you don't have to watch both versions.
GUI Configuration: 1:50
CLI Configuration: 7:13
Yeah, it WAS blocking Tumblr and all of the other sites you brought up there... It was just that your cache hadn't cleared yet. The more you clicked though to refresh, the more we could see them becoming blocked. This Edgerouter technique works very well, I would just like to see some easier way to control the sites in each category. I'm still playing with it in the CLI & Config Tree...
Hey, THANK YOU for these excellent videos on the Edgerouter (My Favorite Router For Home Use!)! It's very nice to actually watch someone who isn't sharing a subject they don't really know anything about. There's a lot of that on UA-cam, but it's obvious that you know what you're talking about - AND - the extra CISCO CLI work was an added bonus! Good Work!
Thank you! Glad you enjoy the videos!
Yeah, I wish there was a bit more granularity to the configuration that wasn't complicated to set up. It's a great feature.
Great video thanks
Great video! How you can block a specific URL for a specific device?
How can I block Eth1 and Eth3 to access the edge router website config? But they still have access to the internet just not the edgerouter GUI.
I only want the Eth2 to access the edgerouter config page.
Unfortunately DPI doesn't seem to work with blocking torrents. Maybe it's because the one I tried was (literally, not kidding) a linux ISO from Ubuntu and might have encryption enabled, but it just ain't working. Anyone know an easy way to check that doesn't involve downloading any pirated content?
I want to do this to block my kids from watching twitch and youtube during school hours. Got their IPs and everything in, seems to work, EXCEPT for UA-cam... any suggestions?
I guess Im asking randomly but does any of you know of a trick to get back into an instagram account..?
I somehow lost the login password. I would appreciate any assistance you can offer me
What if I want to block only facebook?
How we block guests to Access Ui of edgerouter?
There is a command "set system service gui listen-address". This locks down the UI management to the IP address specified. The rest is done with firewall rules to block the guest network from accessing that IP address.
How can you block (users cell phones) from main lan1?
If you mean blocking based on the type of device, then this cannot be done with the Edgerouter alone. You will need specialized software to identify and classify devices.
The best way I can think to do this is to just block based on MAC address, or setup some sort of guest portal. Both will require some upkeep.
@@ToastyAnswers That was my question/request. I need to block users base on mac address using firewall rules. Maybe I did not express my self correctly. Sorry!!
You making great videos,but how we can block youtub3 ads when videos playing?is it possible?
The closest solution is PiHole. Check out my video on setting that up for more information. However, it isn't perfect. UA-cam ads are notoriously hard to block as they use servers that are classified as "legitimate". This is one of the hardest categories to take care of outside using an adblocker extension (and I'm not sure how effective those are now-days).
It doesnt works. 😢
How do we block sites for a specific laptop? My boy is watching UA-cam instead of studying.
In the "Source" tab of the firewall rule, enter the IP address of the PC you are trying to block. This will only apply the rule to that specific "Source".
This can be circumvented by changing his IP address, so you may want to create a reservation in DHCP to keep his address the same or lock it down where he can't change it statically.
@@ToastyAnswers I see a MAC Address option - seems like the best option in case kiddo tries changing IP or physically connects to a switch, etc.
@@johnkrystek847 he can change his MAC address too tho; in fact MAC randomization is a feature built into pretty much all OSes now.
@@noahwilliams8918 if he gets that good, maybe just let him be and sign him up for network administration classes!
..lol half ways affected eeh ........Lmao . good laugh. Thanks
dosnt work