Block access to my Gateway

Routers
1

I want to block the access to my default gateway (192.168.8.1) so any client connected to the router and trying to access the admin panel can be blocked to this website.

I still want to be able to access the admin panel of this router but only through goodcloud.

How is this possible?

I tried creating a rule on Luci by following theses stesps:
In the GLiNet Panel, went to MORE SETTINGS :arrow_right: Advanced

From there opened Luci.

In Luci I went to Network :arrow_right: Firewall :arrow_right: Custom Rules
Here I put:

iptables -I FORWARD -i br-lan -d 192.168.1.0/24 -j DROP
iptables -I FORWARD -i br-lan -d 192.168.1.1 -j ACCEPT

Then click on Restart Firewall.

But nothing happened, I am still able to access the web panel (192.168.8.1) when I am connected to this router.

2

Hi

To restrict unauthorized access to the router while maintaining network functionality, please follow these steps:

  1. Modify Firewall Defaults: Navigate to LuCI > Network > Firewall. Under the General Settings tab, find the LAN zone and change the Input default setting from Accept to Drop or Reject.

    image
    image1123×905 49.7 KB

  2. Add Traffic Rules: To ensure your connected devices can still function, go to the Traffic Rules tab and add two rules to allow essential services:

    image
    image1061×194 12.2 KB

    image
    image1012×154 4.3 KB

    (Scroll to the bottom of the page)

image
image980×173 11.9 KB

  1. Save and apply the configuration, then restart the router for the changes to take effect.

Note: These changes will not affect your ability to manage the device via GoodCloud. However, if a configuration error occurs and you lose local access, you will need to perform a factory reset to restore the default settings.

4

@will.qiu Thank yo for the steps provided.
Could you please describe the steps for “Add those traffic rules” as you did on part 1 (Modify Firewall Defaults)? I tried by my own but it does not look like the image you put and I want to make sure the configuration is correct.

Thanks again.

5

Sorry for the delayed reply.
I have added more specific operating steps to the original post.

Since you did not specify the device model or firmware version, I use the Flint 2 v4.8.3 as an example.
The LuCI interface on other device models may differ, but they should all include similar configuration fields.
You also can refer to the built-in DNS/DHCP rules created for Guest to configure the corresponding settings for LAN.

6

@will.qiu Thank you so, so, so much. It worked perfect and I truly apreciate the help. :slight_smile:

1 Like