The “input” chain is for traffic to the router itself. (WinBox, WebFig HTTP, SSH…) You want the “forward” chain here, being for traffic crossing the router.
Rather than match on specific IPs and ports, if you want all access blocked, why not match on the device MAC instead? MAC spoofing is trivial, but if you catch it doing that, that’s enough to qualify it as malware, IMO.
(Exception: the private MAC feature in mobile devices, where regular randomization of the MAC is a desired behavior.)
Rather than match on specific IPs and ports, if you want all access blocked, why not match on the device MAC instead? MAC spoofing is trivial, but if you catch it doing that, that’s enough to qualify it as malware, IMO.
(Exception: the private MAC feature in mobile devices, where regular randomization of the MAC is a desired behavior.)
Statistics: Posted by tangent — Wed Dec 27, 2023 12:27 pm