OpenWrt Forum Archive

Topic: How allow only one PC to Internet but not to local Lan

The content of this topic has been archived on 15 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
DirkS
24 Apr 2008, 17:12

Hello,

maybe someone can give me a hint how I can do some settings (think firewall) to allow one PC connect by Wifi to the router to have access to the Internet but not  to the local network excepting one port for printing?

Thanks

Dirk

Post #2
conmarti
25 Apr 2008, 19:24

Hello Dirk,

add 3 lines to your /etc/firewall.user

iptables -A forwarding_rule -s 192.168.5.233 -d 192.168.5.234 -p tcp --dport 555 -j ACCEPT
iptables -A forwarding_rule -s 192.168.5.233 -o $WAN -j ACCEPT
iptables -A forwarding_rule -s 192.168.5.233 -j REJECT

192.168.5.233 = IP of client
192.168.5.234 = IP of printer
555 = TCP-Port of printer
this must be adjustet to your circumstances

1st rule allows connections to Printer
2nd rule allows connections to the internet
3rd rule rejects all other traffic coming from this client

then restart firewall
/etc/init.d/firewall start

Conny

The discussion might have continued from here.