Can't ban a website with linksys WRT54G

This is the user interface that linksys provides for banning a web
site.

http://www.linksysdata.com/ui/WRT54G...ss-Restric.htm

Can someone show me how you would fill this form out (successfully) to
ban a website?
24/7/365

On Sat, 27 Jan 2007 12:18:05 -0800, SpreadTooThin wrote:

> This is the user interface that linksys provides for banning a web site.
>
> http://www.linksysdata.com/ui/WRT54G...ss-Restric.htm
>
> Can someone show me how you would fill this form out (successfully) to ban
> a website?
> 24/7/365

that's a pretty intuitive form there bud. Just read the instructions on
the right-hand blue sidebar and you pretty well can't get it wrong.

On Jan 27, 3:51 pm, "mr.b" <m...@b.com> wrote:
> On Sat, 27 Jan 2007 12:18:05 -0800, SpreadTooThin wrote:
> > This is the user interface that linksys provides for banning a web site.
>
> >http://www.linksysdata.com/ui/WRT54G...ss-Restric.htm
>
> > Can someone show me how you would fill this form out (successfully) to ban
> > a website?
> > 24/7/365that's a pretty intuitive form there bud. Just read the instructions on
> the right-hand blue sidebar and you pretty well can't get it wrong.

Try it. I did. I doesn't work. Did you try it?
When ever I try to set the form up to always deny access, the fields
for the web site to be banned
disable themselves..

SpreadTooThin wrote:
>
> On Jan 27, 3:51 pm, "mr.b" <m...@b.com> wrote:
>> On Sat, 27 Jan 2007 12:18:05 -0800, SpreadTooThin wrote:
>>> This is the user interface that linksys provides for banning a web site.
>>> http://www.linksysdata.com/ui/WRT54G...ss-Restric.htm
>>> Can someone show me how you would fill this form out (successfully) to ban
>>> a website?
>>> 24/7/365that's a pretty intuitive form there bud. Just read the instructions on
>> the right-hand blue sidebar and you pretty well can't get it wrong.
>
> Try it. I did. I doesn't work. Did you try it?
> When ever I try to set the form up to always deny access, the fields
> for the web site to be banned
> disable themselves..
>
>
Not tried it with one of these but did you create a "Policy" for what
you wish to do?
Internet Access Policy 1
Status enable
Policy Name Webb1
List of PC'S 192...2 TO 192...20
Web Block...URL http://www.linksysdata.com/ui

save settings

"SpreadTooThin" <bjobrien62@gmail.com> hath wroth:

>This is the user interface that linksys provides for banning a web
>site.
>
>http://www.linksysdata.com/ui/WRT54G...ss-Restric.htm
>
>Can someone show me how you would fill this form out (successfully) to
>ban a website?
>24/7/365

You're not alone:
<http://www.simmonsconsulting.com/wordpress/2006/02/05/url-filtering-with-dd-wrt-v23/>

What firmware version are you running in your WRT54GL?
The latest for US is 4.30.5. If you read the release notes on this
version at:
<http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=text%2Fplain&blobhead ervalue2=inline%3B+filename%3Dwrt54gl_ver.txt&blob key=id&blobtable=MungoBlobs&blobwhere=113083983844 9&ssbinary=true>
you'll see that:
"Resolves issue with filter name"
was fixed. This might possibly be what you're dealing with.

I don't have a WRT54GL handy to try the filter rules, but I can try it
with DD-WRT v23 SP2 on a WRT54GS v4. Close enough.

Blocking by IP address worked just fine as in:
http://xxx.xxx.xxx.xxx/ or xxx.xxx.xxx.xxx
However, blocking by URL in various forms doesn't work at all.

I just tried blocking microsoft.com and example.com. Doesn't work by
name, but works by IP address. Oh, think I see what's happening.
Microsoft.com first points to an Akamai internet cache (akadns.net)
which returns a DNS address. It never really goes directly to the web
site. It might be necessary to block the cacheing server, the DNS
load balancer, and the Microsoft site in order for this to work. Same
problem with my own web sites which use URL redirection. Argh.

Well, blocking by keyword also seems to fail. I tried various forms
and combinations (including quotes) and nothing works. This is not
good.

I'll play with it some more later, but it appears that you're correct.
Filtering either doesn't work or requires some secret incantation.




--
Jeff Liebermann jeffl@comix.santa-cruz.ca.us
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

On Sun, 28 Jan 2007 10:47:02 -0800, SpreadTooThin wrote:

>
>
> On Jan 27, 3:51 pm, "mr.b" <m...@b.com> wrote:
>> On Sat, 27 Jan 2007 12:18:05 -0800, SpreadTooThin wrote:
>> > This is the user interface that linksys provides for banning a web
>> > site.
>>
>> >http://www.linksysdata.com/ui/WRT54G...ss-Restric.htm
>>
>> > Can someone show me how you would fill this form out (successfully) to
>> > ban a website?
>> > 24/7/365that's a pretty intuitive form there bud. Just read the
>> > instructions on
>> the right-hand blue sidebar and you pretty well can't get it wrong.
>
> Try it. I did. I doesn't work. Did you try it? When ever I try to set
> the form up to always deny access, the fields for the web site to be
> banned
> disable themselves..

I've just read Jeff's response to you and have replicated his failures
with my WRT54G...damn. My wife and I are the only users at home so
blocking isn't an issue but I have an extra 54G that I was going to set up
for use at work. I think it pretty great to have such knowledgable people
in this forum. His supplied link was interesting reading.

On Jan 28, 1:16 pm, Jeff Liebermann <j...@comix.santa-cruz.ca.us>
wrote:
> "SpreadTooThin" <bjobrie...@gmail.com> hath wroth:
>
> >This is the user interface that linksys provides for banning a web
> >site.
>
> >http://www.linksysdata.com/ui/WRT54G...ss-Restric.htm
>
> >Can someone show me how you would fill this form out (successfully) to
> >ban a website?
> >24/7/365You're not alone:
> <http://www.simmonsconsulting.com/wordpress/2006/02/05/url-filtering-w...>
>
Great... So its a known bug and no fix.


> What firmware version are you running in your WRT54GL?
> The latest for US is 4.30.5. If you read the release notes on this
> version at:
> <http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheaderna...>
> you'll see that:
> "Resolves issue with filter name"
> was fixed. This might possibly be what you're dealing with.
>
I do have 4.30.5.
Unfortunantly the link I provided seems to be 4.30.0 and isn't
identical and I
can't find the link to the 4.30.5 web page... (I don't mean the
firmware)


> I don't have a WRT54GL handy to try the filter rules, but I can try it
> with DD-WRT v23 SP2 on a WRT54GS v4. Close enough.
>

Why would the DD-WRT be good enough?



> Blocking by IP address worked just fine as in:
> http://xxx.xxx.xxx.xxx/ or xxx.xxx.xxx.xxx
> However, blocking by URL in various forms doesn't work at all.
>
> I just tried blocking microsoft.com and example.com. Doesn't work by
> name, but works by IP address. Oh, think I see what's happening.
> Microsoft.com first points to an Akamai internet cache (akadns.net)
> which returns a DNS address. It never really goes directly to the web
> site. It might be necessary to block the cacheing server, the DNS
> load balancer, and the Microsoft site in order for this to work. Same
> problem with my own web sites which use URL redirection. Argh.
>
> Well, blocking by keyword also seems to fail. I tried various forms
> and combinations (including quotes) and nothing works. This is not
> good.
>
> I'll play with it some more later, but it appears that you're correct.
> Filtering either doesn't work or requires some secret incantation.
>
Ya.. Thanks Jeff... I think I'll just buy a Motorola or DLink.
Too many issues with this router.



> --
> Jeff Liebermann j...@comix.santa-cruz.ca.us
> 150 Felker St #D http://www.LearnByDestroying.com
> Santa Cruz CA 95060http://802.11junk.com
> Skype: JeffLiebermann AE6KS 831-336-2558

"SpreadTooThin" <bjobrien62@gmail.com> hath wroth:

>Unfortunantly the link I provided seems to be 4.30.0 and isn't
>identical and I
>can't find the link to the 4.30.5 web page... (I don't mean the
>firmware)

The firmware emulators at:
http://www.linksysdata.com/ui/
are not always the latest versions.

>> I don't have a WRT54GL handy to try the filter rules, but I can try it
>> with DD-WRT v23 SP2 on a WRT54GS v4. Close enough.
>
>Why would the DD-WRT be good enough?

1. Because it's all that I have handy.
2. Because the various alternative firmware releases are based on the
original Linksys open source code. Many bugs were fixed and features
added to DD-WRT and OpenWRT, but some of the more obscure functions
tend to remain the same as the original.

>Ya.. Thanks Jeff... I think I'll just buy a Motorola or DLink.
>Too many issues with this router.

What other issues? I have a mess of similar Broadcom based routers in
service, and have had very few problems. However, I don't use the
stock Linksys firmware. Before you give up, I suggest you try one of
the alternative firmware versions such as:
http://www.dd-wrt.com
It may not have a functional URL and keyword filter (or I haven't
figured out the trick), but everything else works just fine.

--
Jeff Liebermann jeffl@comix.santa-cruz.ca.us
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

Jeff Liebermann <jeffl@comix.santa-cruz.ca.us> hath wroth:

>I'll play with it some more later, but it appears that you're correct.
>Filtering either doesn't work or requires some secret incantation.

I give up. I can't make either the URL or keyword filter work. I was
also wrong about filtering by IP address in the URL filter (typo
error). That also doesn't work.


--
Jeff Liebermann jeffl@comix.santa-cruz.ca.us
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

On Sun, 28 Jan 2007 12:16:46 -0800, Jeff Liebermann
<jeffl@comix.santa-cruz.ca.us> wrote in
<0mupr2966jce7prn6t5trr15gdi8faiid6@4ax.com>:

>I just tried blocking microsoft.com and example.com. Doesn't work by
>name, but works by IP address. Oh, think I see what's happening.
>Microsoft.com first points to an Akamai internet cache (akadns.net)
>which returns a DNS address. It never really goes directly to the web
>site. It might be necessary to block the cacheing server, the DNS
>load balancer, and the Microsoft site in order for this to work. ...

Which would probably have undesired side effects on other web sites that
use those services. Akamai in particular is likely to be a problem.

--
Best regards, FAQ for Wireless Internet: <http://Wireless.wikia.com>
John Navas FAQ for Wi-Fi: <http://wireless.wikia.com/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.wikia.com/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.wikia.com/wiki/Wi-Fi_Fixes>

On Sun, 28 Jan 2007 22:15:46 -0800, Jeff Liebermann
<jeffl@comix.santa-cruz.ca.us> wrote in
<ls3rr21oj938dgn5o7o7ribt3mltjdks1r@4ax.com>:

>Jeff Liebermann <jeffl@comix.santa-cruz.ca.us> hath wroth:
>
>>I'll play with it some more later, but it appears that you're correct.
>>Filtering either doesn't work or requires some secret incantation.
>
>I give up. I can't make either the URL or keyword filter work. I was
>also wrong about filtering by IP address in the URL filter (typo
>error). That also doesn't work.

Please file a bug report against DD-WRT.
<http://www.dd-wrt.com/dd-wrtv2/bugtracker>

--
Best regards, FAQ for Wireless Internet: <http://Wireless.wikia.com>
John Navas FAQ for Wi-Fi: <http://wireless.wikia.com/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.wikia.com/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.wikia.com/wiki/Wi-Fi_Fixes>