If you have an OpenWRT router, sometimes you need to block particular devices from accessing internet yet still can connect to its Wi-fi network. We can do that easily from the LUCI web-UI control panel.
Head for menu Network > Firewall.
There you can make a new firewall rule. Give it a name in New forward rule section. Then click Add and edit.
Then you have to choose the device’s MAC address to block.
Then choose option Reject in the Action dropdown list.
Then click Save and apply. Make sure you have the new rule is listed in the rules list.
Pandalon 
6 responses to “How to Block Device on OpenWRT Based on MAC Address”
Thank you for your tips
you can even manage the time of in extra parameters for example adding this string
-m time –kerneltz –weekdays Mo,Tu,We,Th,Fri –timestart 00:30 –timestop 6:00
(firewall will use kernel time zone, and from monday to friday it will block traffic from 0:30 am to 6 am)
thank you for your addition, really useful
can we use keyword blocking using this extra parameters?
Please help me toblock facebook in openwrt
What about allow device based on Mac?