(My favourite solution these days a bit tedious to setup though. SOLUTION 1: Buy affordable enterprise class wired router and Access Points (wifi devices). You will still be able to control most aspects of your WIFI but not to same extent as whats possible in solution 1. You will get a good WIFI solution, which is easy to setup, kind of plug and play. If you are not comfortable playing with gadgets, straight away jump to Solution 2.This will give you a robust WIFI with full control over it. If you love experimenting with technology and gadgets, you should go ahead with Solution 1.‘Which solution to choose’ shall depend on your comfort with technology. My suggestion: My two preferred solutions are described below. You will have to embrace some bit of technology to make this happen. No need to be a geek but you will need to understand and apply some tech concepts to make this happen. You will have to invest in better WIFI gadgets. I wish there was a way out but you will have to buy some new gadgets.ģ. In the WFH world the heavy and consistent loading leads them to falter.Ģ. Most (that cost less than 5k) do not excel in any one of the functions above. The home wifi routers, that we normally have, do all the functions above, but to average levels. They are usually given by your ISP or the ones that we usually buy from the market. You may think that everything was working prior to your 100% WFH decision but you need to understand that things have changed and the same setup is not going to work.įirst, let’s understand wireless routers. Realising and accepting that it's not your ISP’s fault. Your ISP is not responsible for your wireless internet experience in every room of your house and for every user (including the ever growing IoT -Internet of Things - devices that you have been buying). I am writing this post to share how I was able to help myself, and some of my friends, solve the internet issues at home. This has put a heavy load on our home wireless internet and I have seen many of my friends complain about the same. All family members, including children, need wireless internet access throughout the day. The iptables rules can be added to a startup script if needed.This article first appeared on the Reputation Today Website here.Īll of us are working from home. Sudo iptables -A VYATTA_FW_LOCAL_HOOK -i l2tp+ -p tcp -dport 443 -j DROP To drop SSH and HTTPS for example: sudo iptables -A VYATTA_FW_LOCAL_HOOK -i l2tp+ -p tcp -dport 22 -j DROP You can however, filter the traffic using iptables and the l2tp+ wildcard interface. It is not currently possible to apply firewall policies to the L2TP interface(s) using the standard CLI/GUI commands. Set interfaces ethernet ethx firewall out name LAN_OUT

Set firewall name LAN_OUT rule 20 destination address Set firewall name LAN_OUT rule 20 source address

Set firewall name LAN_OUT rule 20 description 'deny l2tp'

Set firewall name LAN_OUT rule 20 action drop Set firewall name LAN_OUT rule 10 protocol tcp_udp Set firewall name LAN_OUT rule 10 destination port Set firewall name LAN_OUT rule 10 destination address Set firewall name LAN_OUT rule 10 source address Set firewall name LAN_OUT rule 10 description 'permit l2tp' Set firewall name LAN_OUT rule 10 action accept In order to block the VPN access to the LAN devices, you can add a LAN_OUT firewall rule in the egress direction on all LAN ports (VIFs).įor example: set firewall name LAN_OUT default-action accept

Edgerouter x firewall lockdown