OpenWrt Forum Archive

Topic: Disable ping reply, WLAN MAC address restriction, count traffic volume

The content of this topic has been archived on 25 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

hello,

i'm using kamikaze 0.9 and have some questions:

1)  currently my router replies to pings from the internet / from the wan interface to my router. how to disable ping replies to pings coming in by the wan interface (lan pings shall still be answered)?

2) additionally to wpa2 i'd like to restrict access to my wlan by mac addresses. where can i configure this?

3) what can i use to count the total traffic passing the wan interface (i don't need a function to limit the traffic or detailed statistics, just a total traffic per month statistic) ? it would be also nice if i could exclude some network areas from this couting e.g. 123.456.789.xxx shouldn't be counted.

thank you very much!

(Last edited by srynoname on 12 Feb 2008, 00:56)

somebody can please help me with at least one of these questions?
thank you very much!

Hello,

1) With iptables you can block ping request with "iptables -A INPUT -p icmp --icmp-type 8 -j DROP". It tested it works fine. To block only in wan, specify a network with "-i wan" for example but I'm not sure.
2) Use a table of rules in iptables for the wlan network adapter with something like: Accept mac x y and z else block. (accept a mac address: iptables -A -i wlan0 INPUT -m mac --mac-source 00:0F:EA:91:04:08 -j DROP) I didn't try it but I could be something like it.
3) Don't know.

You can visit this page for more details about the power of Iptable http://www.netfilter.org/documentation/ … WTO-7.html
I hope that I helped you.

(Last edited by jamesbch on 14 Feb 2008, 23:03)

The discussion might have continued from here.