Skip to main content

5 Messages

 • 

140 Points

Thu, May 21, 2015 10:22 PM

Answered

Hi all. Please advise how to block a website (YouTube/FaceBook, etc) on a Ruckus ZD1112 ZoneDirector?

Website access restriction required.

Responses

337 Messages

 • 

5.5K Points

5 years ago

Unless I've missed the feature in the last 4 years of usage this is not something you can do with a ZD.

It configures your APs, creates WLAN, allows/restricts clients, allocates bandwidth and frequencies, schedules and numerous other useful bits but upstream Internet sites is proxy/webfiltering stuff not ZD.

There might be some highly creative workaround...but that's for the clever folk to comment on.

8 Messages

 • 

122 Points

Hi,
I solved by using filtering at DNS level. In particular, I'm using openDNS free service https://www.opendns.com/home-internet-security/ that allows fine-grade blocking or preconfigured filtering at DNS level without any fee.
On the ZD you have only to change the DNS IP to 208.67.222.222 208.67.220.220
Best Regards

5 Messages

 • 

140 Points

5 years ago

Thanks Max. Much appreciated.

9 Messages

 • 

174 Points

5 years ago

IF these feature is included than it would be surely of a great sell value . BUt than it will increase complications in the device and Ruckus would need additional expertise for the Firewall Features . this could change the focus form Wifi . Hence I feel that Ruckus should continue to do its work on Wifi only . 

8 Messages

 • 

122 Points

Hi,
I solved by using filtering at DNS level. In particular, I'm using openDNS free service https://www.opendns.com/home-internet-security/ that allows fine-grade blocking or preconfigured filtering at DNS level without any fee.
On the ZD you have only to change the DNS to 208.67.222.222 208.67.220.220
Best Regards

5 Messages

 • 

140 Points

5 years ago

Good point Shrenik. Would still be a good feature, especially in an educational environment.

8 Messages

 • 

122 Points

5 years ago

Yes, I agree with you. I'm working in a school and I was looking for a way to block services like whatsapp, facebook, youtube, instagram and so on.
I found how to block facebook and instagram by configuring application denial policies. It is very straightforward. However, I could not block whatsapp and youtube in the same way. I tried also to block the services by using port based rules and by following these guides https://github.com/ukanth/afwall/wiki/HOWTO-blocking-WhatsApp and https://stackoverflow.com/questions/9342782/is-there-a-way-to-get-all-ip-addresses-of-youtube-to-blo.... without success.
Any suggestions?
Thank you

8 Messages

 • 

122 Points

4 years ago

Hi,
I solved by using filtering at DNS level. In particular, I'm using openDNS free service https://www.opendns.com/home-internet-security/ that allows fine-grade blocking or preconfigured filtering at DNS level without any fee.
On the ZD you have only to change the DNS IP to 208.67.222.222 208.67.220.220
Best Regards

7 Messages

 • 

100 Points

4 years ago

Typically this stuff is hashed out at the firewall level, not the wireless equipment level. Otherwise it'd be stuck only blocking wireless devices.

8 Messages

 • 

122 Points

Hi,
as I said in a previous post, I solved by using filtering at DNS level. In particular, I'm using openDNS free service https://www.opendns.com/home-internet-security/ that allows fine-grade blocking or preconfigured filtering at DNS level without any fee.
On the ZD you have only to change the DNS to 208.67.222.222 208.67.220.220
If you do not have a firewall this is simple and cheap solution. Moreover, you can set the same DNS on the DHCP of wired network.

27 Messages

 • 

390 Points

... which is a very basic solution. If a client/student is so intelligent to set his DNS server to e.g. 8.8.8.8 (google public dns) your restriction is circumvented. And my students are a lot smarter than that :). Btw. every proxy application will still work.

7 Messages

 • 

100 Points

Why would someone have the money for a ZD but not a firewall?

8 Messages

 • 

122 Points

Yes it is a very basic solution, but it is free and it works while the access control of ruckus does not work.
In our school we have wired and wireless devices for which you need administrator privileges in order to change network setting (and this should be the standard).
Your point is right for mobile devices owned by the students, however they still need to set static IP and DNS. I bet that less than 20% of them are able to do this.
If you know any other free solution, please let me know.

27 Messages

 • 

390 Points

My free-favorite: pfSense (www.pfSense.org) with suricata (for App-Filtering) and squid/Dansguardian for WebFiltering as plugins (yes, this is not easy to configure).

You can also look at: https://www.untangle.com/shop/NG-Firewall-Free/ or
https://www.sophos.com/en-us/products/free-tools/sophos-utm-home-edition.aspx (it is called home edition, but I think there is no legal restriction for corporate use)
Maybe these also get the job done.

But like Tuananh said: we're talking about 300-4000€/$ (depending on size). In my opinion a good (e.g. Cisco, Fortinet, PaloAlto) firewall is more importand than an additional AP for greater WiFi coverage. 

"I bet that less than 20% of them are able to do this" You are correct, but those students will tell the other 80% for sure. And everybody can google: "circumvent firewall" and will get a proxy as a suggestion. Therefore those basic countermeasures are maybe suited for primary but certainly not for secondary education!