Linux DNS blocking for WiFi clients
Budget: $30 – $250 AUD
We have a system very similar to Raspberry Pi 4, using it as a WiFi router to serve WiFi clients using only Apple and Android phones (no laptops) but we really need the ability to block certain traffic but allow specific applications like WhatsApp and Mail.
The system is using Hostapd, dnsmasq, iptables and systemd. We have the internet connected to eth0 and WiFi clients connecting to uap0 with iptables and dnsmasq setup to completely block access until they enter a password then we allow all internet using iptables with that clients ipaddress.
All that works great, but our issue is allowing internet access then opens everything which causes issues when things like apple notifications or apple siri start using data.
The task is to come up with a solution to block everything except WhatsApp and Mail from any mail server. Hopefully it will be a script to execute, to add more iptables rules or add in dnsmasq entries etc.
Adding other software is tricky as it is ARM based but not impossible.
The system is using Hostapd, dnsmasq, iptables and systemd. We have the internet connected to eth0 and WiFi clients connecting to uap0 with iptables and dnsmasq setup to completely block access until they enter a password then we allow all internet using iptables with that clients ipaddress.
All that works great, but our issue is allowing internet access then opens everything which causes issues when things like apple notifications or apple siri start using data.
The task is to come up with a solution to block everything except WhatsApp and Mail from any mail server. Hopefully it will be a script to execute, to add more iptables rules or add in dnsmasq entries etc.
Adding other software is tricky as it is ARM based but not impossible.