D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-855 => Topic started by: donjao on June 12, 2014, 02:08:31 AM

Title: Access Control IP whitelist
Post by: donjao on June 12, 2014, 02:08:31 AM
Is it possible to block all access with exception list?

I've followed these instructions (http://forums.dlink.com/index.php?topic=4955.0), but I'm still unable to make use of it.

First, let me explain the situation. We have a small office, and some of workers started to spend way too much time in the internet. At first, I wanted to block only the facebook, but after trying to do so — I found it quite hard, because it uses https protocol and so much different IP addresses:

204.15.20.0/22
69.63.176.0/20
66.220.144.0/20
66.220.144.0/21
69.63.184.0/21
69.63.176.0/21
74.119.76.0/22
69.171.255.0/24
173.252.64.0/18
69.171.224.0/19
69.171.224.0/20
103.4.96.0/22
69.63.176.0/24
173.252.64.0/19
173.252.70.0/24
31.13.64.0/18
31.13.24.0/21
66.220.152.0/21
66.220.159.0/24
69.171.239.0/24
69.171.240.0/20
31.13.64.0/19
31.13.64.0/24
31.13.65.0/24
31.13.67.0/24
31.13.68.0/24
31.13.69.0/24
31.13.70.0/24
31.13.71.0/24
31.13.72.0/24
31.13.73.0/24
31.13.74.0/24
31.13.75.0/24
31.13.76.0/24
31.13.77.0/24
31.13.96.0/19
31.13.66.0/24
173.252.96.0/19
69.63.178.0/24
31.13.78.0/24
31.13.79.0/24
31.13.80.0/24
31.13.82.0/24
31.13.83.0/24
31.13.84.0/24
31.13.85.0/24
31.13.86.0/24
31.13.87.0/24
31.13.88.0/24
31.13.89.0/24
31.13.90.0/24
31.13.91.0/24
31.13.92.0/24
31.13.93.0/24
31.13.94.0/24
31.13.95.0/24
69.171.253.0/24
69.63.186.0/24
31.13.81.0/24
179.60.192.0/22
179.60.192.0/24
179.60.193.0/24
179.60.194.0/24
179.60.195.0/24
204.15.20.0/22
69.63.176.0/20
69.63.176.0/21
69.63.184.0/21
66.220.144.0/20
69.63.176.0/20

Also, I assume, that if you block access by hostname, you still can use a proxy. So, considering all the above, I'm thinking to block everything except sites needed for work and schedule that policy. This has to apply only to specific devices.

I also need to whitelist gmail.com, but I suspect it's gonna have same huge list of IP addresses. Is there any way I can do this with DIR-855 software?

Thank you.
Title: Re: Access Control IP whitelist
Post by: FurryNutz on June 12, 2014, 07:11:37 AM
I recommend that you check into using a Dynamic DNS service instead of trying to configure the router. DDNS will have better controls and features and might have white and black lists to use. Then you can use the DDNS features on the router to access the service.
Title: Re: Access Control IP whitelist
Post by: donjao on June 13, 2014, 01:53:32 AM
Do I understand you correctly, that it is not possible with build-in D-Link Router software?
Title: Re: Access Control IP whitelist
Post by: FurryNutz on June 13, 2014, 06:55:46 AM
Your needed to a DNS solution to help you moderate and manage your needs, using Dynamic DNS web site solution will help you resolve this using there services. You need this level to help you better and easier control your business needs through this router.