search

k-szuster / luci-access-control

OpenWrt internet access scheduler
Apache License 2.0
150 stars 47 forks source link

can not unblock a device #15

Closed forestforever closed 5 years ago

forestforever commented 6 years ago

Hi, Thank you for creating this great add-on! It has been working really well until recent weeks. First, I started to notice it would block my Roku TV completely without adopting the time set by me. I used the ticket to resolve the issue. No big deal. However, today, after I added one android phone to the access control, my kid's computer got blocked completely instead. I deleted it from the access control list, which doesn't help at all. I found that only after I uncheck the globe setting "enabled" box, my kid's computer can get back on the internet. If I check the box again, the computer will be blocked again. Changing block time, or issuing a ticket won't work. I am wondering as it is not even on the access control list anymore (as I deleted it), how come I just can't unblock it? Can you help? Thanks! #

k-szuster commented 6 years ago

Maybe after time shift, there is wrong time setting in you router?
Could you show the screen shot of network/taffic-rules and run on the router's console: cat /etc/config/firewall iptables -L -v

forestforever commented 6 years ago

image

forestforever commented 6 years ago

image

forestforever commented 6 years ago

image

forestforever commented 6 years ago

image image

forestforever commented 6 years ago

image image image

forestforever commented 6 years ago

Hi, Krzysztof Thanks for the prompt reply. Now I have to uncheck the enable box in the global setting in order to put this computer back online, and its MAC address doesn't show up in the config rules as I deleted it from the access control. My SHARP ROKU TV is still there as you can see, but the time I set doesn't really work, and it is blocked all the time when the enable box is checked unless I issue a ticket. Do you want me to post the screen shots when the enable box is checked instead? Thanks.

k-szuster commented 6 years ago

What I saw first, is that your TV is blocked form 4:00 to 2:00, which means: from 4am to 2am next day. You've got also two rules named "kids...", which were created outside access-control page. However all 3 rules are not enabled at the moment and as such, they don't appear in the iptables dump. I'd suggest to remove both kids... rules from firewall/traffic-rules page and reenter them form access-control page to have them under your control. PS1: you apparently use LEDE 17, which uses different time format and doesn't understand kerneltz switch, unlike earlier versions. This may cause problems. The new version is under work. PS2: If you submit text dumps please paste text from you console rather, than image. It is searchable and much smaller.