XB6 (TG3482) - How to Block IP Address Range?

[Theok]

Hi,

I was wondering if there is anyway to block access to a range of IP addresses using the standard Ignite modem/router.  If not I guess I'll have to search out a new router that should/would have it.  I tried configuring through parental controls and didn't get an error message but I'm not certain that it's set up properly.

Thanks,

Theo

* Added Labels*

[-G-]

---

@Theok wrote:

Hi,

I was wondering if there is anyway to block access to a range of IP addresses using the standard Ignite modem/router.  If not I guess I'll have to search out a new router that should/would have it.  I tried configuring through parental controls and didn't get an error message but I'm not certain that it's set up properly.

---

Not with the controls that we have access to through the admin UI or mobile app.  That's also beyond the capabilities of vendor-provided firmware on most consumer routers.  You would most likely need to use a router running OpenWrt, a pfSense or OPNsense firewall, or some other commercial/business grade firewall or router that provides a flexible firewall where you have full control over over IPv4 and IPv6 rulesets.

[Datalink · Accepted solution]

@Theok if you try to ping those addresses or run a traceroute to them, the failure or success of the ping or traceroute will tell you if the parental controls are actually working as you expect them to work.  

Fwiw, Asus routers with Merlin's Asuswrt and Skynet and Diversion addons loaded will do what you're looking to accomplish.  Skynet will block IP addresses inbound or outbound.  You can also specify IP address ranges.  This is for IPV4 only.  Diversion will block web addresses, so it will block access via IPV4 or IPV6.  There is another addon which apparently can be used to block both IPV4 and IPV6 IP addresses.  That would be used in place of Skynet.  I haven't tried that yet, ..... one of these days.  

Here are some relevant links:

The Asuswrt-Merlin Terminal Menu support various addons for Merlin's Asuswrt:

https://diversion.ch/amtm.html

Diversion is the Add blocker for Merlin's Asuswrt.  This can also be used to block user specified web sites.

https://diversion.ch/

Slynet is the IP address blocker.  It also accepts web addresses and parses those addresses into IP addresses and IP address ranges if necessary.  This addon is IPV4 only.

https://www.snbforums.com/threads/skynet-router-firewall-security-enhancements.16798/

Here's another malware blocker which can be used to block IPV4 and IPV6 addresses.  I don't know if this is maintained anymore:

https://www.snbforums.com/threads/yet-another-malware-block-script-using-ipset-v4-and-v6.38935/

[Theok]

Thanks for the info, Datalink.  I had moved to the stock Rogers set up for simplicity/laziness (and the pods) but may have to go back to my old Asus (Merlin) setup (with another Asus router for mesh setup).