Home All Groups Group Topic Archive Search About

WAG54GS Internet Access Policy

Author
27 Jun 2006 6:34 PM
leigh.turner
Any additional policies after the first enabled policy are ignored.
has anyone else encountered this? and/or have a solution?

I have looked into upgrading the firmware but I am running Firmware
Version: V1.00.08, and the latest firmware download from Linksys is
Version: V1.00.06

Leigh

Author
28 Jun 2006 1:28 AM
Diamontina Cocktail
<leigh.tur***@grg.com> wrote in message
news:1151433279.726874.281840@j72g2000cwa.googlegroups.com...
> Any additional policies after the first enabled policy are ignored.
> has anyone else encountered this? and/or have a solution?
>
> I have looked into upgrading the firmware but I am running Firmware
> Version: V1.00.08, and the latest firmware download from Linksys is
> Version: V1.00.06
>
> Leigh
>

How about saying what the policy is? It could be that it actually is one
that rules out a lot of others. However, try doing a factory reset and
starting again.
Author
28 Jun 2006 8:50 AM
Lanky
Diamontina Cocktail wrote:
Show quoteHide quote
> <leigh.tur***@grg.com> wrote in message
> news:1151433279.726874.281840@j72g2000cwa.googlegroups.com...
> > Any additional policies after the first enabled policy are ignored.
> > has anyone else encountered this? and/or have a solution?
> >
> > I have looked into upgrading the firmware but I am running Firmware
> > Version: V1.00.08, and the latest firmware download from Linksys is
> > Version: V1.00.06
> >
> > Leigh
> >
>
> How about saying what the policy is? It could be that it actually is one
> that rules out a lot of others. However, try doing a factory reset and
> starting again.

I'm trying to block port ranges, but the ui for my Linksys
router/wirewall only allows 2 port range blocks per policy. So in order
to allow access through 25, 53, 80, 110 and 443 I have to apply blocks
for 1 to 24, 26 to 52 etc etc.

I tested the concept by setting policy 1 to block 80 and policy 2 to
block 110, but while policy 1 was enabled, policy 2 wasn't working and
I could send and receive mail.  I swapped these examples around and
still only the first enabled policy is enforced.

I haven't tried a factory reset yet, so this will be my next test. Any
other sugestions?
Author
28 Jun 2006 1:15 PM
Diamontina Cocktail
Show quote Hide quote
"Lanky" <leigh.tur***@grg.com> wrote in message
news:1151484627.383473.54380@i40g2000cwc.googlegroups.com...
>
> Diamontina Cocktail wrote:
>> <leigh.tur***@grg.com> wrote in message
>> news:1151433279.726874.281840@j72g2000cwa.googlegroups.com...
>> > Any additional policies after the first enabled policy are ignored.
>> > has anyone else encountered this? and/or have a solution?
>> >
>> > I have looked into upgrading the firmware but I am running Firmware
>> > Version: V1.00.08, and the latest firmware download from Linksys is
>> > Version: V1.00.06
>> >
>> > Leigh
>> >
>>
>> How about saying what the policy is? It could be that it actually is one
>> that rules out a lot of others. However, try doing a factory reset and
>> starting again.
>
> I'm trying to block port ranges, but the ui for my Linksys
> router/wirewall only allows 2 port range blocks per policy. So in order
> to allow access through 25, 53, 80, 110 and 443 I have to apply blocks
> for 1 to 24, 26 to 52 etc etc.
>

Have you thought about doing it the opposite way around? Eg, put in a block
for ALL ports and then a rule to allow access to those ports you want open
after the block all rules port. Naturally, dont OK anything until all are in
place or you may lock yourself out.
Author
28 Jun 2006 3:29 PM
Lanky
Nice idea but my router/firewall only allows ports to be blocked. I
don't think it's a very smart ui and/or router/firewall combo
Author
29 Jun 2006 10:37 AM
BigJoe
Show quote Hide quote
On 28 Jun 2006 01:50:27 -0700, "Lanky" <leigh.tur***@grg.com> wrote:

>
>I'm trying to block port ranges, but the ui for my Linksys
>router/wirewall only allows 2 port range blocks per policy. So in order
>to allow access through 25, 53, 80, 110 and 443 I have to apply blocks
>for 1 to 24, 26 to 52 etc etc.
>
>I tested the concept by setting policy 1 to block 80 and policy 2 to
>block 110, but while policy 1 was enabled, policy 2 wasn't working and
>I could send and receive mail.  I swapped these examples around and
>still only the first enabled policy is enforced.
>
>I haven't tried a factory reset yet, so this will be my next test. Any
>other sugestions?

Can I just ask why? Are you wanting to block outgoing or incoming
comms on these ports?
Author
29 Jun 2006 11:12 AM
Lanky
BigJoe wrote:
Show quoteHide quote
> On 28 Jun 2006 01:50:27 -0700, "Lanky" <leigh.tur***@grg.com> wrote:
>
> >
> >I'm trying to block port ranges, but the ui for my Linksys
> >router/wirewall only allows 2 port range blocks per policy. So in order
> >to allow access through 25, 53, 80, 110 and 443 I have to apply blocks
> >for 1 to 24, 26 to 52 etc etc.
> >
> >I tested the concept by setting policy 1 to block 80 and policy 2 to
> >block 110, but while policy 1 was enabled, policy 2 wasn't working and
> >I could send and receive mail.  I swapped these examples around and
> >still only the first enabled policy is enforced.
> >
> >I haven't tried a factory reset yet, so this will be my next test. Any
> >other sugestions?
>
> Can I just ask why? Are you wanting to block outgoing or incoming
> comms on these ports?

I'm trying to blocking outgoing activity on everything bar the above
which I intened to review on an ongoing basis.
Author
29 Jun 2006 11:16 AM
Lanky
I'm trying to limit the ability of my childeren using P2P.

I understand that this only narrows their options and does not stopp
them completely.
Author
29 Jun 2006 1:08 PM
Diamontina Cocktail
"Lanky" <leighjtur***@googlemail.com> wrote in message
news:1151579790.957736.271460@d56g2000cwd.googlegroups.com...
> I'm trying to limit the ability of my childeren using P2P.
>
> I understand that this only narrows their options and does not stopp
> them completely.
>

A question here - does your ROUTER allow you to block by PROGRAM name? If so
it may be an easier way out.

Failing that, you could go look up ZoneCD and see if it is right for you. It
basically sets up wi-fi access just as places like Starbucks etc do and
directs you to a portal on the computer which is running it. You sign in via
a password and you can control each person's sign in ability, limiting them
to certain hours etc and you to anything. There are other - and better -
programs you can pay for that do better than it does but I mention it as it
is free AND it runs directly from CD meaning that if it crashes, it doesn't
affect your computer and while running, though it takes your computer over
entirely, it controls who accesses your wi-fi via what YOU want.
Author
29 Jun 2006 2:04 PM
BigJoe
Show quote Hide quote
On 29 Jun 2006 04:12:26 -0700, "Lanky" <leighjtur***@googlemail.com>
wrote:

>
>BigJoe wrote:
>> On 28 Jun 2006 01:50:27 -0700, "Lanky" <leigh.tur***@grg.com> wrote:
>>
>> >
>> >I'm trying to block port ranges, but the ui for my Linksys
>> >router/wirewall only allows 2 port range blocks per policy. So in order
>> >to allow access through 25, 53, 80, 110 and 443 I have to apply blocks
>> >for 1 to 24, 26 to 52 etc etc.
>> >
>> >I tested the concept by setting policy 1 to block 80 and policy 2 to
>> >block 110, but while policy 1 was enabled, policy 2 wasn't working and
>> >I could send and receive mail.  I swapped these examples around and
>> >still only the first enabled policy is enforced.
>> >
>> >I haven't tried a factory reset yet, so this will be my next test. Any
>> >other sugestions?
>>
>> Can I just ask why? Are you wanting to block outgoing or incoming
>> comms on these ports?
>
>I'm trying to blocking outgoing activity on everything bar the above
>which I intened to review on an ongoing basis.

The router won't do this but you can block anything you want with a
software firewall such as Norton.
Author
29 Jun 2006 3:48 PM
Lanky
It doesn't allow blocks by program name. I can block url key words,
urls or port ranges.

I'm already blocking url key words. I was going to block port ranges
and monitor network traffic to see if one of my 5 allowed are being
used for p2p and take it from there.

My network users are quite low tech and I think this would be a large
enough spanner to deter them from bittorrent.
Author
5 Jul 2006 12:50 PM
Lanky
I sent this e-mail.....
------------------------------------------------------------------------------------------------------
I have just purchased a WAG54GS router with built in firewall. I want
to set up multiple Internet Access Policies which affect the same pc,
but only the first enabled policy works.

The reason I want to do this is so I can block all port activity except
25. 53. 80. 110 and 443. As each policy only allows 2 Blocked Services,
I would have to block 1 to 24 and 26 to 52 in policy A, 54 to 79 and 81
to 109 in Policy B etc etc

I have been testing this concept by setting policy A to block 80 and
policy B to block 110, but while policy A was enabled, policy B wasn't
working and I could send and receive mail. I swapped these examples
around and still only the first enabled policy is enforced.

Is this a know bug, or can you not apply multiple policies to the same
MAC Address.
------------------------------------------------------------------------------------------------------
to support***@linksys.com, and they replyed with this...
------------------------------------------------------------------------------------------------------
>From the details that you have provided, you were planning to block
ports on a computer. The following categories work independently even
if another is created:

a. Website Blocking by by URL Address
b. Website Blocking by Keyword
c. Blocked Services

It is not possible to block more than 2 services. Multiple policies are
allowed, however, this would only apply with regard to computers
accessing the Internet.
------------------------------------------------------------------------------------------------------
and I feel like they have confirmed that what I'm doing is correct, but
not offered a solution to my problem.

I think I'll take this router back as it obviously doesn't do what is
required.