Setting Network Restrictions

[MSgherzi]

I need to know if there's some way to set restrictions on a wireless network to shut it down after hours. This is for a Real Estate office with about 10-11 computers.

They are using a Linksys WRT54G and I'd use the built-in restrictions but the problem is that some people come after hours to work. I'd like to know if there's a way for the Internet to block all traffic after hours except for those who log in to something somehow. I'm wanting to restrict traffic after hours because of a security issue with after hour traffic coming in on a particular port (another topic in the security section here on technibble).

Can someone point me in the right direction?

 

[anonymous Mac Tech]

I need to know if there's some way to set restrictions on a wireless network to shut it down after hours. This is for a Real Estate office with about 10-11 computers.

They are using a Linksys WRT54G and I'd use the built-in restrictions but the problem is that some people come after hours to work. I'd like to know if there's a way for the Internet to block all traffic after hours except for those who log in to something somehow. I'm wanting to restrict traffic after hours because of a security issue with after hour traffic coming in on a particular port (another topic in the security section here on technibble).

Can someone point me in the right direction?

I don't know about the Linksys WRT54G but I can select the block services menu. From the block services setup I choose per schedule then have the following options:

Service Type
Protocol
Starting Port
Ending Port
Service Type/User Defined

After the above settings are selected I can choose:

Only This IP Address: . . .

IP Address Range: . . . to . . .

All IP Addresses

After selecting above settings then save changes by adding the service table. Then go to the schedule menu where I have the options of:

Days to Block:
Every Day
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday

Time of day to Block: (use 24-hour clock)
All Day
Start Blocking Hour Minute
End Blocking

 

[MSgherzi]

AdvancedComputer: It's not out of my league at all. I've already got their network on lockdown and have possibly tracked down the activity to a couple of computers. Stringing CAT 5/6/7 cables across this place would be a ridiculous solution, even if it was just temporary. You shouldn't make a suggestion like that unless you know the layout because they've got machines all over the place. Just because I asked for suggestions doesn't imply that this is a "learning experience," it implies that I still want to get others input and suggestions in case they've encountered something different than what I'm assuming.

AnonymousMac: I understand what you're saying, but some of them come after hours at random times to do their work. I need something where they can simply log in and allow the router to only allow traffic incoming and outgoing for that specific IP address(s).


If I felt like I didn't know what I was doing, then I wouldn't be sticking my nose in it in the first place. Just suggestions about this current topic, please.

 

[anonymous Mac Tech]

AnonymousMac: I understand what you're saying, but some of them come after hours at random times to do their work. I need something where they can simply log in and allow the router to only allow traffic incoming and outgoing for that specific IP address(s).

The Linksys WRT54G was the first router to be released with open source firmware. Its also a pretty old router (2003). The above solution I presented should give you exactly what you want provided you know which users will perhaps need after hours access. Just assign those particular users the unrestricted IPs and secure those machines down pretty good you should be all set. If these options are not present here is a link explaining the features of the router with some of the features available at that time pertaining to replacement firmware: http://www.wi-fiplanet.com/tutorials/article.php/3562391

 

[rusty.nells]

Unless I've missed something, you haven't mentioned what you have discovered or accomplished other than locking down the wifi and narrowing it down to a few computers. Was the wifi being hijacked? Is there a botnet on one (or more) of the computers? Just curious.

If the router has a particular port open, surely it's being forwarded to a particular computer/server, correct? Is the traffic coming from a particular IP?