Internet Access Control for OpenWrt

This software is designed for OpwnWrt routers. It allows you to restrict the internet access for specific hosts in your LAN. You can block the internet access permanently or on schedule basis for any MAC address. The schedule contains the time of a day and the days of the week. New in version 4: You can also issue a "ticket" for any blocked user. It gives him an extraordinary access to the internet for a given time.

The software is a Luci app extending the system's firewall, so it runs on any platform with no need to recompile. Tested on OpenWrt BB and CC. Note: due to a bug in CC, the times must be set in UTC, rather than local time.

After installation you'll find a new page in OpenWrt's GUI: Network/Access control.

Screen shot

Source repository

https://github.com/k-szuster/luci-access-control

See also: https://github.com/k-szuster/luci-access-control-package for a standalone-package version of the same software.

To install prebuilt package

Visit: https://github.com/k-szuster/luci-access-control/releases

Download ipk file to your device and install it with opkg.

Reboot.

To build the package OpenWrt

The package works on any target (it is architecture independent). May be built on OpenWrt-CC or later. The source files for BB and CC is placed in "master" branch. The DD (17) version - in separate branch: https://github.com/k-szuster/luci-access-control/tree/OpenWrt/Lede-17.

• Place folder luci-access-control into your

  /feeds/luci/applications

folder.

• After this has been completed, call

	./scripts/feeds update luci ; ./scripts/feeds install -a luci

from your openwrt folder.

• Call

	make menuconfig

Here, you must include the following packages in your OpenWRT build for everything to work:

	LuCI -> applications -> luci-app-access-control

• Call make to compile OpenWRT with the selected package installed. You'll find it in /bin//packages/luci/luci-app-access-control_....ipk file.

• On OpenWrt-BB, after installing the ipk, you need to additionally run this command on the device:

	/etc/init.d/inetac enable

• Reboot.