Community discussions

MikroTik App
 
maniootek
just joined
Topic Author
Posts: 17
Joined: Sat Feb 23, 2013 3:13 pm

Quick button to enable/disable firewall rule

Thu Apr 13, 2023 4:02 pm

Is it possible to make some android/ios app (or web app) and make widget/button which enable/disable some firewall rule?
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11438
Joined: Thu Mar 03, 2016 10:23 pm

Re: Quick button to enable/disable firewall rule

Thu Apr 13, 2023 5:03 pm

ROS supports API which allows to control (certain aspects of) device. So yes, it is possible to make android/iOS app which (by using API) can enable/disable firewal rule. ROS is extremely flexible.

Does an app, which can be directly used for that, already exist? Not that I know of. ROS, being extremely flexible, makes things a bit harder (every device can have pretty different setup and having single app, which would fit, is next to impossible).
 
maniootek
just joined
Topic Author
Posts: 17
Joined: Sat Feb 23, 2013 3:13 pm

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 8:59 am

what is ROS?
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 9:49 am

The fact you ask this question combined with your first post scares the hell out of me ...

Adding to mkx's response: the Android app can be used to enable/disable a firewall rule. Not one button switch so maybe not enough for you.
Don't know about iPhone (I actively avoid anything related to that eco-sphere).

Question from my side: why would you want to do that (toggling firewall rule) ? What's the requirement ?
 
maniootek
just joined
Topic Author
Posts: 17
Joined: Sat Feb 23, 2013 3:13 pm

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 10:58 am

I want to quickly turn off internet on my kid's phone (enabling firewall rule). I already do it but I need to log in to the webiste (webfig) and then click on the small button. I was wondering if there is easier way to do it.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:06 am

why not use Kid Control for this? There is built in function just like that. Disable internet for all of childs devices. Check KID CONTROL in the android app main menu
 
maniootek
just joined
Topic Author
Posts: 17
Joined: Sat Feb 23, 2013 3:13 pm

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:13 am

why not use Kid Control for this? There is built in function just like that. Disable internet for all of childs devices. Check KID CONTROL in the android app main menu
Kids use iPhones, and I use parental control. They have time-limited app usage, but this is not the perfect option for parents. Sometimes I need my kid to immediately stop watching the iPhone (like dinner time), but he still has not reached the daily time limit on the YouTube app, so I just go to the firewall and cut the internet off for this specified phone by enabling the firewall rule. But please do not focus on the way I deal with my kids. I would rather know a faster and easier way to enable or  disable the firewall rule.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:21 am

Kid control is EXACTLY for that. It works better than firewall, because it blocks at MAC comunication level. Please try before criticizing. It is a feature in all MikroTik routers. In the same app you use now for disabling your firewall, just different menu.

I said nothing about how you manage your childrens time. I suggested an existing feature in your router
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:23 am

And MAC addresses can not be changed on iPhone ?

My view:
Sounds like a game of "whack-a-mole" to me ... kids will ALWAYS find ways to circumvent such roadblocks.

Here at home:
When it's dinner time, phones away from the table on a dedicated spot.
Problem solved.

There are even people going out in a pub and the first thing they do, is they all put their phones on the center of the table.
So they can TALK to each other (interesting activity, no ?).
The first one to touch his/her phone, has to pay the bill.
You can easily change that to household chores.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:25 am

No, MAC address can't be changed on iPhone. Seems like nobody here has tried Kid Control feture. Please try and then report back :)
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:28 am

No, MAC address can't be changed on iPhone. Seems like nobody here has tried Kid Control feture. Please try and then report back :)
I understood MAC randomization is default on iOS ?

And for the record: I toyed quite a bit with kid control when I still had a vacation house in France.
Works pretty well (but not on MAC level for the above mentioned reason): time restriction, volume restriction, bandwidth control, ... works all very well.
I used IP address (and a long lease time corresponding to the rental period).
 
maniootek
just joined
Topic Author
Posts: 17
Joined: Sat Feb 23, 2013 3:13 pm

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:37 am

Kid control is EXACTLY for that. It works better than firewall, because it blocks at MAC comunication level.
I thought you talk about kid control build in the phone. I didn't know there is such an option KIC CONTROL in the mikrotik router.
This sould be under IP menu? I can't find it, maybe my software is too old
IP:
ARP
Accounting
Addresses
Cloud
DHCP Client
DHCP Relay
DHCP Server
DNS
Firewall
Hotspot
IPsec
Neighbors
Packing
Pool
Routes
SMB
SNMP
Services
Settings
Socks
TFTP
Traffic Flow
UPnP
Web Proxy
I will learn about it later.
Please try before criticizing.
Please don't understand me wrong. I just wanted to make it clear that I want to discuss about software way to solve my issue.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:40 am

IMG_F2508917CDE5-1.jpeg
main menu
You do not have the required permissions to view the files attached to this post.
 
maniootek
just joined
Topic Author
Posts: 17
Joined: Sat Feb 23, 2013 3:13 pm

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:42 am

I just installed mikrotik app (before I used webfig) but I see this:
Screenshot_20230414_104112_MikroTik.jpg
You do not have the required permissions to view the files attached to this post.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:45 am

you have many years old router software, just like it says on the screen, choose option to upgrade first
 
maniootek
just joined
Topic Author
Posts: 17
Joined: Sat Feb 23, 2013 3:13 pm

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:53 am

you have many years old router software, just like it says on the screen, choose option to upgrade first
Upgraded, now I see this option. I will test it. Thank you
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:55 am

BTW @Normis:
what's version 7.10alpha48 about ? :lol:
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 11:57 am

final proof that mikrotik indeed DOES TESTING before releasing :D
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11438
Joined: Thu Mar 03, 2016 10:23 pm

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 12:18 pm

final proof that mikrotik indeed DOES TESTING before releasing :D
And it took 48 tries to actually do some testing? :-P
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 12:21 pm

bugs are being fixed between each alpha, they are not made just to increase version number :)
 
maniootek
just joined
Topic Author
Posts: 17
Joined: Sat Feb 23, 2013 3:13 pm

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 12:29 pm

Seems like nobody here has tried Kid Control feture. Please try and then report back :)
Mikrotik APP + KID CONTROL option is awesome. I can disable internet for my kid quick and easy way. Thank you again.

Now I am going to install MIKROTIK app to my wife's iPhone but I need to make account for her. Is it possible to make group which allow to manage KID CONTROL option only?
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 12:36 pm

make sure you check out all the options - there are speed limits, time limits, schedules possible.

abut second account - in the background, kid control does a lot of things in the router, so there is no possiblity to deny other things.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 12:48 pm

Or put otherwise:

making a second account is an "all or nothing" option.
The second account will be able to do exactly the same as you if you give it the rights to do something.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19103
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Quick button to enable/disable firewall rule

Fri Apr 14, 2023 2:08 pm

Im surprized you dont want to turn off your wifes phone ;-)
Smart phone addiction is real, and understand the OPs concerns, watch parents these days, they spend more time on their phone
and they give kids toy ipads to distract them so they can get back to their phones. Now those kids will be parents soon.......it can only get worse.

I say burn all the phones!!
 
lubomirs
just joined
Posts: 5
Joined: Tue Feb 05, 2019 4:07 pm

Re: Quick button to enable/disable firewall rule

Sun Apr 16, 2023 12:17 am

No, MAC address can't be changed on iPhone. Seems like nobody here has tried Kid Control feture. Please try and then report back :)
You can enable the private address on your iPhone for a Wi-Fi connection.
Wifi - settings - private adress (On/Off)
The children had it set up and after each update they reported to the network with a different MAC.
Yes, I mean set it up separately for each Wi-Fi.
 
optio
Long time Member
Long time Member
Posts: 655
Joined: Mon Dec 26, 2022 2:57 pm

Re: Quick button to enable/disable firewall rule

Sun Apr 16, 2023 1:38 am

Currently on iOS there is no parental controls that allows to restrict setting for private WiFi address (MAC randomization) https://support.apple.com/en-us/HT201304.
Only way to achieve this currently is trough Apple Configurator https://apps.apple.com/hr/app/apple-con ... 6344?mt=12 configuration profile (.mobileconfig). Profile can be applied only when device is physically cable connected to Mac (or through some MDM solution which you probably don't have).
This must be done first to be able to identify device on router, Apple suggest that feature should be disabled to identify device https://support.apple.com/guide/iphone/ ... 24bb33/ios, see also: https://support.apple.com/en-us/HT211227 and https://support.apple.com/guide/securit ... b3140c/web. When you don't have control over device all the time it can be only disabled by configuration profile.
.
Screenshot 2023-04-16 at 00.32.16.png
You do not have the required permissions to view the files attached to this post.

Who is online

Users browsing this forum: 0xAA55, itvisionpk and 44 guests