relevant part of /etc/config/firewall:
# Only allow 192.168.1.6 to access LuCI http
config 'rule'
        option '_name' 'Restrict-LuCI-http'
        option 'src' 'lan'
        option 'src_ip' !192.168.1.6
        option 'dest_ip' 192.168.1.1
        option 'dest_port' 80
        option 'proto' 'tcp'
        option 'target' 'REJECT'
# Only allow 192.168.1.6 to access LuCI https
config 'rule'
        option '_name' 'Restrict-LuCI-https'
        option 'src' 'lan'
        option 'src_ip' !192.168.1.6
        option 'dest_ip' 192.168.1.1
        option 'dest_port' 443
        option 'proto' 'tcp'
        option 'target' 'REJECT'
# Only allow 192.168.1.6 to access ssh
config 'rule'
        option '_name' 'Restrict-ssh'
        option 'src' 'lan'
        option 'src_ip' !192.168.1.6
        option 'dest_ip' 192.168.1.1
        option 'dest_port' 22
        option 'proto' 'tcp'
        option 'target' 'REJECT'
 
 
No comments:
Post a Comment