Gaz Posted November 20, 2012 Posted November 20, 2012 Does anyone else here use Draytek routers? I've got one at home and I need to disallow access to an IP address on my LAN from other computers on the lan to the device. I've just bought a Yamaha AV receiver that has network connectivity but zero security. Its got a web admin panel that allows for firmware update and changing of the IP/DNS, but because you don't need to enter a password in to change such details theres nothing to stop someone (twisted brother) on the LAN changing such details. Its unlikely they would but it gets worse when they could also use the phone app and play havoc wirelessly by playing music, turning the unit on and off etc etc. Anyway is it possible to set a firewall rule to only allow data from my PC's IP and my Phones IP and nothing else.
AngryTechnician Posted November 20, 2012 Posted November 20, 2012 Depends on the model. We have a Vigor 2920 and it can do this with data filters, but I don't know which models have that feature.
Geoff Posted November 20, 2012 Posted November 20, 2012 Yes, i also have a 2820 and a 2930. As above both these models can do it with filters.
Gaz Posted November 20, 2012 Author Posted November 20, 2012 Its a 2820Vn which I assume has the same firewall features. Any clue as to what I would need to enter into the data filter?
Gaz Posted November 20, 2012 Author Posted November 20, 2012 Delving deep into the config it has a mac address filter on the receiver to limit access, better than nothing I suppose. Will still try firewall way as it will be interesting to get it working.
keithu Posted November 21, 2012 Posted November 21, 2012 If all of your devices are on the same network segment (your LAN) the firewall rules won't affect anything as local traffic is not being sent through the router/firewall - your Draytek is just being used as a switch. It is possible on the Draytek to put the physical ports and wireless SSIDs into different VLANs which would be able to connect to the internet but not with each other. That way you could separate 'Gaz-net' from 'Bro-net'.
Gaz Posted November 22, 2012 Author Posted November 22, 2012 Cheers Keith that does make sense. It does have a LAN > LAN direction option though which I assumed was for anything goes through the LAN was checked. I'm using the MAC filter on the device which works a treat.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now