[GoldenAxe]

Hi Everyone,

I have blocked Google DNS (and more) using Advanced Routing->Static Routing to manage VPN and Netflix blocking on my Samsung tv (KS9500), but this action doing me issues with connecting to other applications/games on other devices (I get drop or no connection, if I disable the ip's block everything seems fine).

So I wonder if I can block this to a single device by Mac/Ip?

Routing Table (for blocked ip's):
Destination LAN NET Subnet Mask Gateway Flags Metric Interface
8.8.4.4 255.255.255.255 192.168.1.1 UGH 2 LAN & WLAN
8.8.8.8 255.255.255.255 192.168.1.1 UGH 2 LAN & WLAN
23.246.0.0 255.255.192.0 192.168.1.1 UG 2 LAN & WLAN
37.77.184.0 255.255.248.0 192.168.1.1 UG 2 LAN & WLAN
45.57.0.0 255.255.128.0 192.168.1.1 UG 2 LAN & WLAN
108.175.32.0 255.255.240.0 192.168.1.1 UG 2 LAN & WLAN
185.2.220.0 255.255.252.0 192.168.1.1 UG 2 LAN & WLAN
198.38.96.0 255.255.224.0 192.168.1.1 UG 2 LAN & WLAN
198.45.48.0 255.255.240.0 192.168.1.1 UG 2 LAN & WLAN

* the table looked much better when writing this (with tab indentations), don't sure how to fix this

I also use the following commands:
iptables -t nat -A PREROUTING -d 8.8.8.8 -j DNAT --to-destination 23.21.43.50
iptables -t nat -A PREROUTING -d 8.8.4.4 -j DNAT --to-destination 54.229.171.243

iptables -I PREROUTING -t nat -p udp --dport 53 -j DNAT --to-destination 195.28.181.161
iptables -I PREROUTING -t nat -p tcp --dport 53 -j DNAT --to-destination 195.28.181.161

iptables -I FORWARD -d 108.175.32.0/255.255.240.0 -j REJECT
iptables -I FORWARD -d 198.38.96.0/255.255.224.0 -j REJECT
iptables -I FORWARD -d 198.45.48.0/255.255.240.0 -j REJECT
iptables -I FORWARD -d 185.2.220.0/255.255.252.0 -j REJECT
iptables -I FORWARD -d 23.246.0.0/255.255.192.0 -j REJECT
iptables -I FORWARD -d 37.77.184.0/255.255.248.0 -j REJECT
iptables -I FORWARD -d 45.57.0.0/255.255.128.0 -j REJECT

All was given from the support of the VPN that I'm using.
FYI, it's seems to me like a double DNS ip block/redireciton, but I'm not sure, I know that the end goal is to redirect all google DNS (and the others) queries to the VPN DNS.

Thanks.

[GoldenAxe]

Bump...

[Per Yngve Berg]

Enable logging on the router for blocked packets.See if any addresses are present in the logs.

[GoldenAxe]

OK thanks I'll give it a try.

Log Management
Log Enable
Log Level High

Options
Dropped Disable
Rejected Enable
Accepted Disable