Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I have a Netgear RP114, and according to the manual I should be able to set up an IP filter. I'm trying to block a computer from accessing the internet. This computer, according to the DHCP table has an IP of 192.168.0.3. However, when I try to block this IP as the 'source' IP address in the filter settings, I'm told it's an invalid IP address. I've turned the subnet mask on/off (if that has any effect), and played with port settings and everything else without any luck. Does anybody know what I'm doing wrong?
I don't know if the following settings have any effect on the router's ability to block but they might be useful for ya:
the IPs are generated by the router (if that has any effect)
I've been leaving the 'destination' IP filter information blank until I get this 'source' IP thing figured outas an add on question, is there a good way of blocking the 'source' IP completely or am I going to have to set up several filters to block destination IPs and Ports?

You have a couple of things here.
First - blocking one IP address when using DHCP is a BAD thing. Why?
DHCP dynamically assigns an IP address, so even if it give the one computer 192.168.0.3 this time, it could just as easily give it 192.168.0.4 the next time, which means you wont block the computer. Consequently another computer you do want to have access to the internet could end up with 192.168.0.3 and then you would be blocking it.
Solution...assign the one computer you want to block a Static IP address. Then assign the IP filter to block that static IP address.
Next, I can only speculate why you are getting an invalid address message which is directly related to the subnet mask. You don't just Turn on/and Turn off a subnet mask. It is as important a part of the IP addressing as the addressing. Without going too deep into things the subnet tells routers which part of the IP address is for the network and which part is for the host.
For example...192.168.0.3 with a subnet of 255.255.255.0 means the network is 192.168.0 and the compute is number 3, however, 192.168.0.3 with a subnet of 255.255.0.0 means the network is 192.168. and the computer is number 3 in a COMPLETELY different network. Consequently 255.255.0.0 for 192 is an invalid IP address. The reason being it's a Class C with a Class B subnet. You'll need to read a book on subnet masking for why.
Your subnet mask should match the subnet mask in your router for your network side (not the internet side). Verify with your router or router manual the subnet mask on the network side, and then match it in the filter subnet mask section.
As far as a good way to block the source IP I just gave it to you, without having to ever configure it to block a certain port. You block ports if you dont want to completely block the source IP from the internet or other services, just some in particular...I.E. you may not want it to have telnet capability, but your okay with it getting web browsers. You would set up destination IPs only if you know of certain internet sites you don't want anyone to get to like porn.
Get yourself a good basic book on networking with a section on IP addressing. You'll be glad you did.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |