Stupid Question D-Link DSL 504

Gripper

unread,

May 16, 2003, 5:30:24 PM5/16/03

to

Got one of these to replace my Alcatel USB frog thingy and PC server- works
great- love it.

Stupid question- is it possible to use the browser based configuration
thingy to disable/enable individual RJ45 ports on the router?

sorry.....

.....stupid question..........

I'll get me coat..

Neil

Mr K.

unread,

May 16, 2003, 5:35:45 PM5/16/03

to

Nope - you can't.

"Gripper" <donts...@home.dot> wrote in message
news:ba3l9g$isj$1...@sparta.btinternet.com...

Rob Morley

unread,

May 16, 2003, 6:06:09 PM5/16/03

to

In article <ba3l9g$isj$1...@sparta.btinternet.com>, donts...@home.dot
says...

> Got one of these to replace my Alcatel USB frog thingy and PC server- works
> great- love it.
>
> Stupid question- is it possible to use the browser based configuration
> thingy to disable/enable individual RJ45 ports on the router?
>
>

You can filter by IP address or logical port number in either direction,
thus partially or totally 'disconnecting' a machine, but that doesn't
take account of which physical port a machine is on. Might I suggest
unplugging the cable as an effective means of disabling a physical port?

Gripper

unread,

May 17, 2003, 5:50:22 AM5/17/03

to

Thanks Mr K & Rob Morley- I think I knew what the answer would be.
As for physically unplugging the network cable- well yes I suppose I could
but what are PC's for except to keep you sitting in front of them, not
needing to get out of your chair? Eh?
Thanks
Neil

"Rob Morley" <nos...@ntlworld.com> wrote in message
news:MPG.192f70ce4...@text.news.ntlworld.com...

Gripper

unread,

May 18, 2003, 6:42:16 AM5/18/03

to

Rob, could you lead me step by step through the process of preventing a
machine on my network, at say 192.168.02 for instance, from having internet
access? but still network access?
If alternatively you could point me at a resource I'd be grateful
TIA
Neil

"Rob Morley" <nos...@ntlworld.com> wrote in message
news:MPG.192f70ce4...@text.news.ntlworld.com...

Rob Morley

unread,

May 18, 2003, 10:46:39 AM5/18/03

to

In article <ba7o28$qi9$1...@sparta.btinternet.com>, donts...@home.dot
says...

> Rob, could you lead me step by step through the process of preventing a
> machine on my network, at say 192.168.02 for instance, from having internet
> access? but still network access?
> If alternatively you could point me at a resource I'd be grateful

I'll have a go, but I've only got the manual to work from so I'll be
making a few assumptions.

In the web admin window, go to "Advanced Filtering and Firewall".
Select "Enabled" in the "IP Filter" box at the bottom. Click on a
number to select a rule set. In the "Set Comments" box enter something
like "No Internet", then click "OK" to save.

Select the first rule, call it something like "Allow local", enter
"192.168.0.2" in the Source IP box
"255.255.255.255 /32" in the Source Netmask Box
"Out" in the "Direction" box
"All" in the "Protocol" box
"Pass immediately" in the "Pass or Block" box
"192.168.0.0" in the Destination IP Address
"255.255.255.0 /24" in the Destination Subnet Mask
Click "OK" to enter the rule.

Now select the second rule, call it something like "Block internet",
enter
"192.168.0.2" in the Source IP box
"255.255.255.255" in the Source Netmask Box
"Out" in the "Direction" box
"All" in the "Protocol" box
"Block immediately" in the "Pass or Block" box
"0.0.0.0" in the Destination IP Address
"0.0.0.0 /0" in the Destination Subnet Mask
Click "OK" to enter the rule.
Click "OK" to get back to the main page.

It's unclear to me whether you have to "Save Changes" at this point, or
whether the rules will work already, so try some pings to see if the
filter is working okay. I'm guessing that it will work, and that you
only need to "Save Changes" to prevent loss of settings if the power
goes down. This should mean that if you screw up and you haven't saved
the changes, then switching the router off and on again will restore the
previous settings.

Let me know how you get on.

Gripper

unread,

May 18, 2003, 11:56:11 AM5/18/03

to

Rob
that is extremely kind of you to take the time to post this info: I will try
it and post back. I've spent all afternoon trying to do this, but no success
thanks

Neil
"Rob Morley" <nos...@ntlworld.com> wrote in message

news:MPG.1931ad1bc...@text.news.ntlworld.com...

Gripper

unread,

May 18, 2003, 12:29:52 PM5/18/03

to

Rob

latest update -no success I'm afraid. The interface is slightly different on
my DSL504- there is no "direction" box, but there is a choice of
"ISP1/Ethernet"
very grateful for any further help....
although I think I'll give it a rest for a while as my eyes are sticking to
the screen.....

Neil

"Gripper" <donts...@home.dot> wrote in message

news:ba8aer$dih$1...@titan.btinternet.com...

Rob Morley

unread,

May 18, 2003, 1:04:13 PM5/18/03

to

In article <ba8ce0$71t$1...@hercules.btinternet.com>, donts...@home.dot
says...

> Rob
>
> latest update -no success I'm afraid. The interface is slightly different on
> my DSL504- there is no "direction" box, but there is a choice of
> "ISP1/Ethernet"
> very grateful for any further help....
> although I think I'll give it a rest for a while as my eyes are sticking to
> the screen.....
>

Sounds like they've simplified it a bit. Can you grab the HTML for the
relevant config pages from your browser, and post them somewhere? (or
mail them to me - my email is valid) Don't know if that will work - you
might have to grab screenshots, in which case don't email them unless
you can get them down to small GIFs :-)

Gripper

unread,

May 18, 2003, 1:35:30 PM5/18/03

to

Rob
check your email
thanks again

Neil
"Rob Morley" <nos...@ntlworld.com> wrote in message

news:MPG.1931cd684...@text.news.ntlworld.com...

Gripper

unread,

May 19, 2003, 4:44:20 AM5/19/03

to

Thanks for your help Rob: now all hunkydory:
only need to set one rule as follows:
say the user you want to block is Fred on 192.168.0.2:
in Web browser- >configuration>advanced filtering and firewall
IP filter state>enabled
set a rule called, say, blockfred
pass/block>block
interface>ISP1 (or whatever you've called your internet link)
protocol>TCP
Source>0.0.0.0
SubNetMask>0.0.0.0
=
Start Port>0
EndPort>0
Destination IP>192.168.0.2
Subnet Mask>255.255.255.255
=
StartPort>0
EndPort>0
Add the rule,click apply, reboot, voila- user fred can use network
resources, printers, etc but has no internet access.
Thanks Rob
Neil (happy Bunny)

Rob Morley

unread,

May 19, 2003, 1:00:42 PM5/19/03

to

In article <baa5h4$hca$1...@hercules.btinternet.com>, donts...@home.dot
says...

> Thanks for your help Rob: now all hunkydory:
> only need to set one rule as follows:
> say the user you want to block is Fred on 192.168.0.2:
> in Web browser- >configuration>advanced filtering and firewall
> IP filter state>enabled
> set a rule called, say, blockfred
> pass/block>block
> interface>ISP1 (or whatever you've called your internet link)
> protocol>TCP
> Source>0.0.0.0
> SubNetMask>0.0.0.0
> =
> Start Port>0
> EndPort>0
> Destination IP>192.168.0.2
> Subnet Mask>255.255.255.255
> =
> StartPort>0
> EndPort>0
> Add the rule,click apply, reboot, voila- user fred can use network
> resources, printers, etc but has no internet access.
> Thanks Rob

No probs - I suspected as much, but without knowing what the options on
the new interface are it was kinda hard to guess. I was going to get
back to you but I was otherwise involved. It looks as if they've made
the new rules a bit easier to grasp for those who aren't network
technicians.

Just one thing - as it stands you've only blocked TCP. Is there an
"All" option in the protocol selection? If not you might want to add
rules for other protocols, at least UDP.

Gripper

unread,

May 19, 2003, 1:49:55 PM5/19/03

to

"Rob Morley" <nos...@ntlworld.com> wrote in message
>

> Just one thing - as it stands you've only blocked TCP. Is there an
> "All" option in the protocol selection? If not you might want to add
> rules for other protocols, at least UDP.
>
>

yup, will do.
Neil