I've been trying to ban certain IP addresses through my router settings during specific times, but I noticed that one user is still online during those restricted hours with a different IP address. I'm curious about how they're managing to do this and what steps I can take to prevent it in the future. Any advice?
5 Answers
For internal networks, definitely look into MAC address filtering. If it’s external, there are options to block traffic from entire countries, which might be too much, but worth considering depending on your needs.
It sounds like what you really need is to block MAC addresses instead of just relying on IP bans. With a VPN, anyone can easily change their IP address, so it’s not a foolproof method for blocking users.
Blocking only an IP can be pretty ineffective. If someone has admin rights, they can change their IP settings to dynamic and get a new address. You should explore options like VLANs or blocking whole ranges of IPs to really secure your network.
You might be better off looking into controls based on MAC address, as that’s tied to the device itself. Blocking an IP is a bit like having a gate without a fence—it's not very secure. If you're aiming for something like parental controls, a dedicated system might work better for you.
Remember, DHCP assigns IP addresses dynamically. If someone connects and gets a new IP address every time they join the network, that would explain their presence during restricted hours. Some devices even randomize their MAC addresses, complicating things further.
That's a good point! I didn't realize how easy it was to change IPs with a VPN.