Rules to apply to block DLNA to client

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Rules to apply to block DLNA to client

steve98

1400 posts

Uber Geek
+1 received by user: 252

Trusted

#133505 24-Oct-2013 12:18

Hi guys

I have a Fritz!Box 7390 router connected to a 15-port switch which then goes off to various clients around the house -- one of them is a Blu-Ray player with DLNA in my Son's bedroom. The router has the ability to restrict certain network applications at particular times of the day and I'd like to use it to restrict him from watching movies over the network beyond his bedtime.

There are pre-existing network application templates like BitTorrent etc that you can apply, but you can also create new ones. The trouble is I don't really know what to enter and googling it just confused me more. Here's a screenshot of the form, does anyone know what I should enter to block DLNA? Cheers!

1 | 2

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#920937 24-Oct-2013 12:23

I think DLNA uses UPnP to discover devices. So I guess you could block traffic on UDP1900. Not sure how well it will work.
And good luck blocking any sort of P2P torrent stuff. Most BitTorrent clients will use random ports. Torrents are notoriously hard to block.

steve98

1400 posts

Uber Geek
+1 received by user: 252

Trusted

#920983 24-Oct-2013 13:28

Ah awesome I will give that a go and see how it turns out. Not too worried about the BitTorrent stuff for now but if I can get this working it will be a blessing!

Cheers

Steve

steve98

1400 posts

Uber Geek
+1 received by user: 252

Trusted

#920984 24-Oct-2013 13:28

Oh wait... so I would put that as destination and source port? Or just one or the other?

wellygary

8810 posts

Uber Geek
+1 received by user: 5287

#920987 24-Oct-2013 13:33

Here's a link to a discussion involving a popular DLNA server (Twonky)- there are a bunch of ports in use, but by gumming enough of them up you should be able to stop them.

http://community.twonky.com/twonky/topics/which_firewall_ports_needs_twonkymanager_upnp_dlna_to_work

wellygary

8810 posts

Uber Geek
+1 received by user: 5287

#921005 24-Oct-2013 13:58

Just a thought, I am not sure you are going to be able to block the Bluray player, as its all on your side of the router, ( i.e all plugged into the switch)

The Fritzbox will block packets going to a from the "rest of the world" but things on your side of the router will just go to the switch they wont need to go to the router.

timmmay

20858 posts

Uber Geek
+1 received by user: 5350

Trusted

Lifetime subscriber

#921078 24-Oct-2013 16:03

You could perhaps set up a firewall on the server, with a timed rule to prevent access from his IP/Mac.

Dell

Shop now for Dell laptops and other devices (affiliate link).

graemeh

2080 posts

Uber Geek
+1 received by user: 226

#921082 24-Oct-2013 16:19

You could go for the low tech approach, buy a cheap network switch and cheap timer. Feed his room through the cheap switch and use a timer to turn his net connection off at bedtime :)

chevrolux

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#921087 24-Oct-2013 16:35

Looking at that it looks like it won't be firewalling local LAN clients. As you see it sees 'sends data to the internet'.

I am guessing those rules would only be useful for blocking net based applications and not local stuff.

What are you actually trying to achieve? Stop the Blu-Ray player access the net? Or stop it accessing DLNA content?

steve98

1400 posts

Uber Geek
+1 received by user: 252

Trusted

#921090 24-Oct-2013 16:41

chevrolux: Looking at that it looks like it won't be firewalling local LAN clients. As you see it sees 'sends data to the internet'.

I am guessing those rules would only be useful for blocking net based applications and not local stuff.

What are you actually trying to achieve? Stop the Blu-Ray player access the net? Or stop it accessing DLNA content?

Ah yes... that will be why it doesn't work!

And I'm trying to stop the Blu-Ray player accessing DLNA - would like to be able to time it or just turn it off when I want. This might not be possible in which case I will just put a timer on the Blu-Ray as some other kind soul suggested.

LennonNZ

2459 posts

Uber Geek
+1 received by user: 411

ID Verified

Trusted

#921093 24-Oct-2013 16:47

DLNA is done on the local network.. i.e. it doesn't go over the internet but on the local LAN so the router cannot block it going to the internet which you are trying to do.

Where is is playing the content from on his blurry DLNA client? you have a DLNA Server? which has twonkymedia or alike?

steve98

1400 posts

Uber Geek
+1 received by user: 252

Trusted

#921096 24-Oct-2013 17:00

LennonNZ: DLNA is done on the local network.. i.e. it doesn't go over the internet but on the local LAN so the router cannot block it going to the internet which you are trying to do.

Where is is playing the content from on his blurry DLNA client? you have a DLNA Server? which has twonkymedia or alike?

Yup I'm running tvmobili on a Mac where the media is stored. It doesn't have controls that allow you to block out particular clients... does twonky?

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

LennonNZ

2459 posts

Uber Geek
+1 received by user: 411

ID Verified

Trusted

#921099 24-Oct-2013 17:08

If your switch is manageable you could just write script to connect to the switch and turn off the port the blurry player is connected to. I

_or_ a lot simpler.. "Can you not watch tv after 10:00 please son"

steve98

1400 posts

Uber Geek
+1 received by user: 252

Trusted

#921101 24-Oct-2013 17:09

LennonNZ:

_or_ a lot simpler.. "Can you not watch tv after 10:00 please son"

LOL that is the funniest thing I have heard all year! ;-)

Thanks for the advice everyone. Cheap timer it is.

chevrolux

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#921105 24-Oct-2013 17:20

I am fairly sure the Fritz can limit devices on a time control system.
You tell it which device and it simply stops access at given times. Why not try applying this kind of control to your Bluray player?

Have a look under the Parental control system. Fairly sure it does it based on IP so you may want to set a static DHCP mapping for the player.

steve98

1400 posts

Uber Geek
+1 received by user: 252

Trusted

#921127 24-Oct-2013 18:07

chevrolux: I am fairly sure the Fritz can limit devices on a time control system.
You tell it which device and it simply stops access at given times. Why not try applying this kind of control to your Bluray player?

Have a look under the Parental control system. Fairly sure it does it based on IP so you may want to set a static DHCP mapping for the player.

Will give it a go but after reading all the comments in this thread I'm not sure it will block LAN traffic - might just be internet traffic. Will report back.

1 | 2