Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I configure a router to limit a computer to local network and block its incoming or outgoing WAN access? What kind of settings I should look into?

I am using Tomato firmware.

share|improve this question
This is normally done with Vlans - you can include vlan in the access list and prevent it from using NAT translation. This would be best solution but I dont know if this is possible on Tomato. Im pretty sure though that there is an IPtables [] which could be treated as light weight firewall - you can setup a rule to drop packets based on source and destination. – mnmnc Dec 23 '12 at 1:31

Check the Parental Controls.

I'm not familiar with Tomato settings but many firmwares will let you control and/or meter the internet access using parental controls.

You should be able use the machines IP or MAC address to restrict its access.

I can block access completely or allow it on a schedule with my Asus router.

share|improve this answer

A simpler way is to use the Access Restriction menu, make a rule for specific Ethernet interface with disabled internet access.

Here's a video tutorial

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.