Question

Hello.

I need change some parameters in a RUT955 model, specifically are SSH Access Secure and List of Blocked Addresses in Access Control / Safety section. I want to do it with uci commands but I can't found where is located.

How can change it with uci command? Can I reload this change without router rebooting? From web, seems totally necessary reboot it.

For more details this is the web configuration section.

Answer 1

Hello,

The configuration file you are interested in is /etc/config/blocklist.

Depending on what which access type you want to configure, WebUI or SSH, below are a couple of example commands to block set addresses:

• For SSH access:
  • uci add blocklist dropbear
  • uci set [email protected][-1].ip='<IP_address>'
  • uci commit
• For WebUI access:
  • uci add uhttpd dropbear
  • uci set [email protected][-1].ip='<IP_address>'
  • uci commit

For more details on uci configuration, refer to this page. 

It is also advised to update your device's firmware to the latest. 

Best regards,

Comments

Thank you. This command works and if I want to delete a blocked address I've execute

uci delete [email protected][0]

But I can't find a way to do the following 2 things:

1. enable or disable SSH Access Secure
2. when delete a blocked address, type uci commit and luci-reload (just in case), the address is still blocked and is only released when I reboot the router

Some advice to do this two things?

---

1. This configuration is set in file /etc/config/logtrigger. The commands to disable SSH Access secure should be as follows:

• uci set [email protected][0].enabled='0'
• uci commit

2. I have executed commands in the following succession and had deleted blocked IP address:

[email protected]:/etc/config# uci add blocklist dropbear
cfg014dd4
[email protected]:/etc/config# uci set [email protected][-1].ip='192.168.1.15'
[email protected]:/etc/config# uci commit
[email protected]:/etc/config# uci show blocklist
[email protected][0]=dropbear
[email protected][0].ip='192.168.1.15'
[email protected]:/etc/config# uci delete [email protected][0]
[email protected]:/etc/config# uci commit
[email protected]:/etc/config# uci show blocklist
[email protected]:/etc/config# luci-reload
A match found : 18
A match found : 98
bad
enabling logtrigger
A match found : 18
A match found : 98
logtrigger is already enabled
logtrigger is already enabled
[email protected]:/etc/config# uci show blocklist
[email protected]:/etc/config#