Posted: Fri Mar 17, 2017 18:30 Post subject: Block incoming access by URL/Domain name
Is there a way within DD-WRT of blocking by URL/Domain. IP address range only goes so far and would need continual updating if the address keeps changing.
First of all, I don't fully understand the problem -- your topic says "incoming access", so block WAN-side access to the router? (if you mean connections from LAN to the Internet, amend your topic to say "outgoing")
Second, no amount of filtering will work against HTTPS connections, since they're encrypted (so no keyword-based blocking). But there's a way to block the domain:
This filter will block all outgoing requests to "domain.com" on ports 80 (HTTP) and 443 (HTTPS) over TCP. You'll want to insert this into Firewall rules in Administration > Commands.
Do note that DNS blocking is ineffective if you don't also block outgoing connections to third-party DNS servers (since anyone can just change their DNS server entry to point elsewhere, like Google's 8.8.4.4, and bypass the DNS block altogether).
Unfortunately, at least my dd-wrt (r29147) doesn't include the "string" module, so I can't test blocking by "Host: ".
