Region : Indonesia

Model : TL-WDR4300

Hardware Version : V1

Firmware Version : 3.13.33 Build 130729 Rel.56122n

ISP :

I need to disable internet access for one IP address (we have 30s user for this router) in our LAN.
So this IP address can access local LAN but not WAN

In this case, I use access control... with the following

SETTING
- HOST
Mode : Mac address
Description : MR K
MAC ADDRESS : XX-XX-XX-12-23-56

-TARGET
MODE : IP ADDRESS
Target Description : ALL
IP ADDRESS : 1.1.1.1 - 223.255.255.255
TARGET PORT : 1 - 65535
PROTOCOL : ALL
COMMON SERVICE PORT : (not selected)

- SCHEDULE
Schedule Description : Everyday
Day : Everyday
Time : all-day 24 hours (check mark)

Those are the settings and I use them to make 1 rule with name : MRKK

The problem :
With those setting,
If I " enable internet access control" using " Deny the packets specified by any enabled......router"
The result is : The computer that should be disabled, still can access the web..

I did, the other way around by using " Allow the packets specified by any enabled ....... the Router "
I did the setting as above .... HOST and SCHEDULE are the same but for TARGET I only set for PORT : 1 - 9000, the rest are empty
The result is : All computer can not connect to web sites / other targets.
Not just the designated IP address but all other computers can't get access...

Is it a wrong setting or bugs problem ?

If my setting is wrong, please tell me how to fix it ...

Thx,
Rex