To block the Boox China network (or any specific network, such as those associated with Boox devices from China) from accessing the internet on your OpenWrt router, you’ll need to create firewall rules to drop traffic from the relevant IP ranges. Since "Boox China network" isn’t a standard term with a universally defined IP range, I’ll assume you mean traffic originating from Onyx Boox (a Chinese company) servers or related Chinese IP ranges. If you have specific IP addresses or ranges in mind, you can adjust the steps accordingly.
Here’s how you can set this up using OpenWrt’s LuCI web interface or the command line:
Option 1: Using LuCI Web Interface
Log in to LuCI:
Open your browser and go to your router’s IP address (e.g., 192.168.1.1).
Log in with your credentials.
Navigate to Firewall:
Go to Network > Firewall > Traffic Rules.
Add a New Rule:
Scroll to the "New forward rule" section, give it a name like block_boox_china, and click Add.
Configure the Rule:
Source Zone: Select lan (assuming the devices are on your local network).
Source Address: Leave it as "Any" unless you’re targeting a specific device on your LAN.
Destination Zone: Select wan (to block internet access).
Destination Address: Specify the IP range for the Boox China network. For example:
If you know specific Boox servers (e.g., 203.195.128.0/24), enter that.
For a broader block of Chinese IP ranges, you might use something like 42.56.0.0/16 (a known Chinese range, adjust based on your needs).
Action: Select Drop (silently discards packets) or Reject (sends a rejection response).
Protocol: Select Any unless you want to block specific protocols (e.g., TCP/UDP).
Save and Apply:
Click Save and then Save & Apply to activate the rule.
Option 2: Using the Command Line
If you prefer more control or need to block multiple ranges, use SSH to configure the firewall:
SSH into Your Router:
Connect via a terminal (e.g., ssh root@192.168.1.1).
Edit the Firewall Configuration:
Open the firewall config file:
vi /etc/config/firewall
Add a new rule at the bottom:
config rule
    option name 'block_boox_china'
    option src 'lan'
    option dest 'wan'
    option dest_ip '203.195.128.0/24'
    option target 'DROP'
    option enabled '1'
Replace 203.195.128.0/24 with the actual IP range you want to block. Add more config rule blocks for additional ranges.
Apply Changes:
Save the file (:wq in vi) and restart the firewall:
/etc/init.d/firewall restart
Finding Boox China IP Ranges
Since Boox devices likely connect to Onyx servers in China, you’ll need to identify their IP ranges:
Check logs on your router (Network > Diagnostics or logread via SSH) to see what IPs your Boox device contacts.
Alternatively, block larger Chinese IP ranges (e.g., from APNIC’s allocation list), but this might over-block unrelated services. For example:
42.0.0.0/8 (China Telecom)
116.196.0.0/16 (China Mobile)
Use caution, as this could affect other devices or services.
Notes
Specificity: If you only want to block Boox updates or telemetry, you’ll need the exact server IPs, which might require monitoring traffic (e.g., with tcpdump or a packet sniffer).
IPSet for Large Lists: For many IP ranges, consider using ipset (install via opkg install ipset) to manage them efficiently:
ipset create boox_block hash:net
ipset add boox_block 203.195.128.0/24
iptables -A FORWARD -m set --match-set boox_block dst -j DROP
Testing: After applying the rule, test internet access from your Boox device to confirm it’s blocked.
If you have a specific IP range or more details about what "Boox China network" means to you, let me know, and I can refine the instructions!