Blocking Internet traffic except WhatsApp and Email for wifi clients
Budget: $250 – $750 AUD
We have an embedded ARM based platform (similar to Raspberry Pi 4) that has been configured as a WiFi router for connecting Apple and Android phones only (no laptops).
We need a solution that blocks all apps and internet traffic except for applications we nominate. Initially we want to allow network access for WhatsApp and Email (all email apps) .
Our preference is a solution based on executing a script that adds more iptable rules or entries to the dnsmasq or something similar. If we need to add additional software modules, this is not ideal, however it may be necessary.
Currently our platform is using Hostapd, dnsmasq, iptables and systemd. The WAN is connected to eth0 and WiFi clients connect to uap0 with iptables and dnsmasq setup to completely block access until connected clients enter a password to allow internet traffic using iptables with that clients ipaddress. All this works great however, our issue is allowing internet access that opens everything which causes issues when things like apple notifications or apple siri start using data. Internet access is provided to our platform via an expensive satellite link so this is the reason why we need to completely control what applications can access internet data.
We need a solution that blocks all apps and internet traffic except for applications we nominate. Initially we want to allow network access for WhatsApp and Email (all email apps) .
Our preference is a solution based on executing a script that adds more iptable rules or entries to the dnsmasq or something similar. If we need to add additional software modules, this is not ideal, however it may be necessary.
Currently our platform is using Hostapd, dnsmasq, iptables and systemd. The WAN is connected to eth0 and WiFi clients connect to uap0 with iptables and dnsmasq setup to completely block access until connected clients enter a password to allow internet traffic using iptables with that clients ipaddress. All this works great however, our issue is allowing internet access that opens everything which causes issues when things like apple notifications or apple siri start using data. Internet access is provided to our platform via an expensive satellite link so this is the reason why we need to completely control what applications can access internet data.