How to set up IP Filter on Cudy router?

What is it?

IP filter allows you to control what IP traffic would be allowed inside and out of your network.

How to configure it?

Step 1: Open a web browser and go to http://cudy.net or http://192.168.10.1

For details, please refer to How to log into the web interface of Cudy Router?

Step 2: Click Advanced Settings -> IP Filter in the Security section.

 

Step 3: Check settings on IP Filter page.

 

 

• To block the specific IP address(es)

1. Select 'Allow all except list'.

2. Type in the IP Address(es) you want to block and choose the correct Subnet mask.

Example: All devices are not able to access the Cudy official website.

3. Save & Apply the operation.

• To allow the specific device(s)

1. Select 'Allow list only'.

2. Type in the IP Address(es) you are allowed to access.

Example: Only allowed to access the Cudy website, the other website will not be able to load.

3. Save & Apply the operation.

Note: When you don't want to limit the internet, choose 'Disable' from the drop-down list and save the settings, not only 'Delete' the item.

Back to blog

8 comments

@Dear Hein,
For now, there is no limit on the ipv6 connection. I think you don’t need to worry about it. For IPv6 has additional security. And there is alo firewall on the terminals.

“Thanks, but you’ve still not answered my question. How do I prevent inbound connections to IPv6 enabled hosts? I don’t want them to be reachable from the Internet. Outbound connections should work (as it does), but I want inbound connections to be blocked. I.E. I’m able to ping my laptop from the Internet which is not desirable.”

Support

Thanks, but you’ve still not answered my question. How do I prevent inbound connections to IPv6 enabled hosts? I don’t want them to be reachable from the Internet. Outbound connections should work (as it does), but I want inbound connections to be blocked. I.E. I’m able to ping my laptop from the Internet which is not desirable.

Hein

@Dear Hein,
You are right. If you enable this and you want to ping the WAN IP address of the router. It will response.

“Thanks,
I have a WR3600 running 2.3.12. SPI is on yes. I see there is an option “Respond to Ping” which is enabled which I assume means the router responds to ping and doesn’t relate to allowing ICMP through the router.”

Support

Thanks,

I have a WR3600 running 2.3.12. SPI is on yes. I see there is an option “Respond to Ping” which is enabled which I assume means the router responds to ping and doesn’t relate to allowing ICMP through the router.

Hein

@Dear Hein,
What is the model and firmware of your router?
Do you disable the SPI Firewall of your router? Please check. We will test it.

“Hi,

I’ve enabled IPv6 on my router which works well. All inbound traffic is however allowed, which is undesirable in most cases since all my devices are directly reachable from the internet.

How do I enable IPv6 so I can communicate out without allowing inbound traffic?"

Support

Leave a comment