Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to block certain URL's on my Draytek 2820n router, but am having trouble making it work.

Can someone give the steps to setting up blocking please.

Also, can you then let certain IP's circumvent these rules?

Any help is greatly appreciated.

share|improve this question

You need to setup the "URL content filter" on the Firewall tab. Use the "Enable URL Access Control" section and enter the URLs or partial URLs that you want blocked eg ebay will block, and so on.

To exclude certain IPs from this filtering you will firstly need to create two "pretend" subnets and bind the MAC addresses of the trusted PCs to the first subnet and the untrusted to the second. For example your LAN is - even though we are not subnetting it for the puposes of the block we are prentending to. So the first subnet is and the second is

You then need to enable "Enable Excepting Subnets" and enter This will exclude from the filtering all addresses between

You can of course change the subnet sizes to suit your needs.

share|improve this answer

This article on the DrayTek user forums may be helpful (registration required):

Exclude subnet or ip from webcontent filtering (DrayTek Forums)

I think if you want to have an exception for specific IP addresses you add the IP address and a subnet mask of

share|improve this answer

Have you considered using a web proxy instead. That allows fine grained control over web access and it keeps a log of who has been to what sites, which can be very useful when confronting the malefactors with the evidence of their misdeeds :-)

There's an open source web proxy called SQUID that is very good.


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.