IP Networking

Yes, I'm putting in router's MAC address (BSSID). After I typed in those commands into the terminal app, I typed in iptables -L and it didn't show my changes.

Ok... I already have PuTTY for Windows, and I downloaded an app called SSH Server onto my Android. I was able to successfully connect with PuTTY. But when I type "su" into the PuTTY terminal to get root access, it says "Permission Denied." I also tried logging in PuTTY as "root". But then it asks me for a password... which I don't know the root password. I tried searching, but I can't find any answers. People are saying, "You don't need to use your root password; Superuser does the job." I don't know what to do to make my phone let PuTTY get root permissions.

I'm not sure that's the the same MAC as ARP uses, which is what MAC matching checks.

Double check what MACs your android thinks are what IP's by running arp -n from your terminal app.

I just did that and it's showing a different MAC address. It's labelling it as "[ether] on eth0". I checked in my router, and it's showing my LAN MAC address. I've tried my LAN (and WAN) in the past already and it won't block access to the router with them either.

I think the BSSID is only relevant for the wireless communication layer -- strip that away and you get plain old ethernet.

Try blocking that mac, instead of the BSSID.

IT WORKS!!!

*facepalm*. So it's definitely my LAN MAC address that needs to be used. However, when I had tried the LAN address before, it didn't work because I needed to REBOOT MY PHONE!!! It finally occurred to me when I thought, "Hey, whenever I make firewall iptables rules changes in Tomato or DD-WRT, I always have to reboot the router to make the changes take effect."

So, I put in the LAN MAC address, rebooted the phone, and voila! Can't connect to the internet!!!

Now... I guess I'll have to use the "arp -n" code in a terminal app in my friend's son's phone while connected to the neighbour's router. I was just planning on using the BSSID of the neighbour's router... but clearly that won't work.

Actually -- it only appears in arp once you've already connected and started communicating, so that's no good.

You might just have to store the numbers somewhere.

Another thing you could do is allow one particular MAC, and disallow all others...

That might mean you're supposed to use sudo instead of su. Hopefully a moot point now anyway.