1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

external ip address blocking

Discussion in 'Tomato Firmware' started by axeman1972, Apr 12, 2012.

  1. axeman1972

    axeman1972 Serious Server Member

    Hi,
    I'm having a problem with a web cam that's being constantly accessed by an ip address originating Nicosia Cyprus. I have no idea what the intent of that site is, but it has my camera streaming 24/7 and driving my internet usage through the roof. I have password protected the web cam until I come up with a solution. I have two routers, an E4200 v1, and an older WRT54GS v.3. The E4200 is currently in service. According to Cicso chat, the external ip cannot be blocked. with the E4200. Would using tomato fireware give me the capability to deny access to an individual ip like HTTP: 91.184.192.xxx?
    Thanks for your help
    axeman1972,
     
  2. lancethepants

    lancethepants Network Guru Member

    Yes it would be able to block an individual ip. Using iptables you could setup a firewall rule to block all connections from any ip address you want.
    This command should take care of it, just fill in the x's with the information you left out.

    Administration -> Scripts -> Firewall.
    Code:
    iptables -A INPUT -s 91.184.192.xxx -j DROP
    Then reboot.
     
  3. phuque99

    phuque99 LI Guru Member

    That iptables command protects only the router, not the webcam. The right command to use to drop packets forwarded into private network is:

    iptables -I wanin -p tcp -s 91.184.192.0/24 -j DROP
     
  4. axeman1972

    axeman1972 Serious Server Member

    Thanks for your prompt answers, I no longer am bothered by the Corsican,
    Regards,
    Axeman1972
     

Share This Page