Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to prevent users from accessing the Internet through a wired connection to my router. How do I protect this?

I have a Belkin G+ MIMO 4-port Router with the following version info:

Firmware Version  1.00.02 (Jul 31 2008 22:32:20)
Boot Version      V0.13         
Hardware          F5D9231-4v1(01)   
Serial No.      12838923107956
share|improve this question
well, if you'll never need to use them you could fill them with resin or take cut off or un-used cable ends and glue them into the ports. but that may be a little extreme – Xantec Dec 10 '10 at 17:22
just fill your LAN-Ports with hot glue or silicone ;) – schöppi Dec 10 '10 at 19:50

You could lock the router in a box, with holes cut out for the antennae and hard-wired internet connection. Of course, someone could always just unplug your router from the wall and plug their computer directly on the internet port. So unless you're going to keep the router in a locked room, or put some sort of locking cover/cabinet over the internet port in the wall, this may be an exercise in futility.

share|improve this answer

What we do at work is put the router in a locked room (that's where are intenet connection resides). Voila, no wired access.

share|improve this answer

Maybe you might consider turning off the DHCP on your router, then set the IP address scheme to something a little strange - say for the internal IP address. If they don't know the address scheme and don't know the gateway address, that should stop them.

share|improve this answer
This is interesting. How would this affect wireless users? – Jacob Dec 11 '10 at 1:41
Same. They may see your SSID, but without DHCP, they would have to know how to manually configure their IP settings to get in and would need to know what IP address the gateway is at and what IP scheme to use. – Blackbeagle Dec 16 '10 at 10:08
Note that this will not work if you use no (or crackable) encryption since the IPs and MAcs will be sent over the air and can be picked up by anyone. – Hennes Feb 9 at 9:49

Assuming you're looking for a software option, you could try using a domain on your network, and only allow network or Internet access from the domain. In order to join the domain, you'd need a username/password, making anonymous access not possible.

share|improve this answer

Look for MAC filtering in your router's settings. It's by any means not a foolproof method, but normal users won't know what to do.
Just add a list of allowed MAC (all devices you want to allow to connect through a wire) and block all others.

share|improve this answer
This may depend on the router. In my old Linksys, and my new Netgear, the MAC filter is specific just to the wireless connections. There is no MAC filter section for wired connections. – eidylon Dec 10 '10 at 20:49

This answer on Server Fault mentions RJLockdown (manufacturer) which looks like it might be useful.


share|improve this answer
This is interesting because the OP of the referenced post talks about disabling a port. Is there a software way to disable a TCP/IP port on the router? – Jacob Dec 11 '10 at 20:09
@P23: The factory firmware doesn't seem to support this. If you can find alternative firmware that supports your model, you may be able to disable the ports or create a dead-end VLAN. While DD-WRT doesn't appear to support your model, here is a discussion if its VLAN features. They do support other Belkin models so you might see if future support is planned for yours. – Dennis Williamson Dec 11 '10 at 21:32

While not overly effective, you can block the average user from connecting via wired or wireless if you filter by MAC address. If you want people to be able to access using wireless, then go with eidylon or xantec's suggestion.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .