blocker les ports sur orbi rbk23

[lebphi]

bonjour,

j'envisage d'acheter un pack orbi rbk23 mais avant je voudrais savoir s'il est possbile de bloquer les ports en sortie.

Je voudrais en fait bloquer par défaut tous les ports à  l'exception de quelques uns ( 80, 443, ...)

J'ai regardé dans la doc mais je n'ai pas trouvé comment faire.

Est ce possible ?

merci d'avance

[FURRYe38]

en anglais s'il vous plaît

[lebphi]

I'm considering buying an orbi rbk23 pack but first I would like to know if it's possible to block the output ports.

I would actually like to block by default all ports except for a few ones ( 80, 443, . . . )

I looked in the doc but I didn't find out how to do it.

Is that possible?

thank you in advance

[lebphi]

I plan to buy a pack orbi rbk23 but before I would like to know if it is possbile to block the ports output.

I would like to block all ports except for a few (80, 443, ...).

I looked in the doc but did not find how to do it.
Is it possible ?
thank you in advance

[FURRYe38]

I don't believe blocking ports is a feature of Orbi. You can block devices. 

You could I support do Port Forwards to a phantom IP address if you really need to block ports. 

[lebphi]

thanks you.

I wanted to replace my 2 mikrotik router by a mesh solution but the orbi isn't enough customizable for me. I would like a solution with iptables possibilities.

[ekhalil]

---

@lebphi wrote:

............ I would like to know if it is possbile to block the ports output.

I would like to block all ports except for a few (80, 443, ...).

...........

---

It's possible to restrict users from accessing certain ports using "Service Blocking" (outgoing traffic). You can do this per users and according to a schedule if needed. Please see attached snapshot from the Orbi web GUI.

On the other hand you also mentioned iptables, but iptables is used for incoming traffic, is this what you want to blcok?

For incoming traffic you can use the iptables in a similar way to what's in the post here https://community.netgear.com/t5/Orbi/DoS-Attacks/m-p/1744554/highlight/true#M60590

[lebphi]

i want to block by default outgoing traffic for all users :

- for all the ports except a few ones (443, 80, ...)

- for all access to my local network (192.168.1.x)

and accept all outgoing traffic for all ports and for access to the local network for a list of mac address or ip address.

For iptables, you can use "iptables -A forward" for outgoing traffic no ?   I'm wrong ?

[ekhalil]

---

@lebphi wrote:

i want to block by default outgoing traffic for all users :

- for all the ports except a few ones (443, 80, ...)

- for all access to my local network (192.168.1.x)

and accept all outgoing traffic for all ports and for access to the local network for a list of mac address or ip address.

.....

---

That is easily done using "Block Services" in the web GUI under >> ADVANCED >> Security >> Block Services

---

@lebphi wrote:

........

For iptables, you can use "iptables -A forward" for outgoing traffic no ?   I'm wrong ?

---

Probably yes, but I don't think you would need that since the function is available in the GUI.

[lebphi]

ok thanks you. i'll buy an orbi pack and try;

[ekhalil]

---

@lebphi wrote:

ok thanks you. i'll buy an orbi pack and try;

---

Good luck!