Cut Internet temporarily in a device in your LAN

narsaw · December 9, 2019, 5:25pm

Also curious as @ashfaaaa asked, is this possible with HA via Docker install?

leepark · February 5, 2020, 2:45pm

I’m also interested in this as an Hass.io addon.

duceduc · September 10, 2020, 9:13pm

Yes, me three with Hassio install. My kid is out of control with youtube. This is the solution to my problem

Tomer_Klein · February 20, 2021, 9:58pm

Well, Long time ago i was searching for a way to implement some kind of Internet kill switch. i came a cross an article that shows how to use arpspoof in order to that. the problem was that alpine does not support arpspoof so i have developed dockere container with arpspoos warpped with python flask and here is the result.

Tomer_Klein · March 15, 2021, 7:14am

Finally, got it working.
ArpSpoof docker

https://en.techblog.co.il/2021/03/15/home-assistant-cut-internet-connection-using-arpspoof/

elRadix · March 15, 2021, 11:34am

nice guide, easy to follow and setup

qkn · June 2, 2021, 6:18pm

@Tomer_Klein the link doesn’t work, do you have new one that works?

Vasco · June 2, 2021, 7:07pm

https://hub.docker.com/r/techblog/arpspoof-docker

anilet · June 2, 2021, 10:26pm

Would you be able to post the “How to” to your Github page

duceduc · June 2, 2021, 11:06pm

I would like to know as well a how to install guide.

Vasco · June 3, 2021, 12:52am

lol after googling and reverse engineering links back to each site, i think i found something. But it’s Hebrew, so used google translate to make it readable for those who can’t read that.

https://translate.google.com/translate?sl=auto&tl=en&u=https://www.home-assistant.co.il/single-post/2018/10/04/Cut-internet-connection-using-ArpSpoof

Tomer_Klein · June 11, 2021, 1:49pm

Yes,
Sorry for that.
My site has been hackd and i had to take it down.
working on new guid, will publish it in a few days.

Tomer_Klein · June 11, 2021, 2:04pm

The howto is back online, there are some images still missing, but the instructions are there.

Vasco · June 11, 2021, 6:46pm

Got it up and running. Fun, reminds me of some days at school where we did the same to teachers using netcut xD also arp spoofing tool.

For those running docker on rpi. Make sure you use the arm tag

Vasco · June 11, 2021, 9:15pm

I was thinking, would be awesome to have a card which automatically populates with unknown devices. And I hope @thomasloven can help me a bit. This could be very powerful in first line of direct defence.

So, first off all I think I’d use nmap tracker and have it scan my DHCP range (192.168.1.1-255) or maybe (192.168.1.2-254 , as 192.168.1.1 is my router and 255 is just a broadcast address)

Then maybe (and this is where I could use @thomasloven his knowledge) use auto-entities card from thomas ( GitHub - thomasloven/lovelace-auto-entities: 🔹Automatically populate the entities-list of lovelace cards )

So, domain maybe device_tracker as filter, exclude the devices I know.

Then comes the tricky part, hope there is a solution to this. It needs a way to dynamically fill in some predefined data and insert some variables.

  - platform: command_line
    switches:
      kill_internet:
        command_on: "/usr/bin/curl -X GET http://[docker_ip]:7022/disconnect?ip=[IP_to_Block]"
        command_off: "/usr/bin/curl -X GET http://[docker_ip]:7022/reconnect?ip=[IP_to_Block]"
        command_state: "/usr/bin/curl -X GET http://[docker_ip]:7022/status?ip=[IP_to_Block]"
        value_template: '{{ value == "1" }}'
        friendly_name: Internet Kill Switch

As where IP_to_Block should be auto populated by the nmap attribute: ip

@thomasloven can you please help me with this idea, or point me into a direction as to where I can continue my investigation?

duceduc · June 11, 2021, 9:33pm

Oh ok. Now that the link is backup online. I remembered looking at the page, but didn’t go forward with the install because I have no idea how to install it on my HomeAssistantOS over a rpi3. Never played with Docker either.

Vasco · June 12, 2021, 5:56am

Install portainer addon
Open portainer
Choose new container
Fill in all the details, below is the template. Portainer is the gui. So there you have a few tabs to fill, such as labelw, image, environment etc. You can ignore the volume as I don’t need to map anything.

version: "3.7"

services:

  arpspoof:
    image: techblog/arpspoof-docker
 #   build: https://github.com/t0mer/broadlinkmanager-docker.git
    network_mode: host #Network mode must be set to host
    container_name: arpspoof
    restart: unless-stopped
    labels:
      - "com.ouroboros.enable=true"
    volumes:
      - ./arpspoof/arpspoof.py:/opt/arpspoof/arpspoof.py
    environment:
      - ROUTER_IP= #Required Router IP
      - INTERFACE_NAME= #Required Interface name

I will PM you a few screenshots of my setup in portainer. Makes it easier.

duceduc · June 12, 2021, 9:15am

I’ve found two portainer. I should choice Home assistant Community Add-oms?

2021-06-12_18-13-52

Vasco · June 12, 2021, 12:09pm

Community addons version is fine

Final-Hawk · June 27, 2021, 7:20am

Has anybody gotten this to work? I have installed it however ports are not being published so i cannot send curl commands to it