FlintGuard
See every device on your Flint 3 router and decide which new ones get online
FlintGuard is an app for the GL.iNet GL-BE9300 (Flint 3) router. It shows who is on your network, cuts a device off the internet with one swipe and asks you before a new device gets online.
It talks to the router directly — over your home network, or through Tailscale when you are away. A small agent on the router watches for new devices and sends notifications. One codebase runs as an iPhone app and as a web page served by the router itself.
FlintGuard is a personal project in active development: it runs on its author's home network, and the iPhone build is in internal TestFlight testing. It is an independent, unofficial app, not affiliated with or endorsed by GL.iNet.
Screenshots
Features
Online and offline devices with name, type, connection (cable or Wi-Fi band), IP, MAC and live speed. Tabs for All, Online, Blocked and Waiting, search by name, IP, MAC or manufacturer, and a filter by parental-control profile. Private (randomised) MAC addresses are marked.
Swipe a device to block or unblock its internet access, or use the switch on its card. The change shows at once and rolls back with an explanation if the router refuses. FlintGuard won't let you block the device you are managing the router from.
The agent on the router spots every new device. In Quarantine mode a newcomer stays without internet until you approve it — on the Waiting tab or right from the notification. Give it a name and a profile as you approve.
Turn it on for each network separately: only devices approved in FlintGuard can join, and anyone else gets “Unable to join” even with the password. Each attempt lands in the event log and sends a notification with Allow and Block buttons.
Alerts about new devices arrive through ntfy or, on iPhone, straight in FlintGuard — with Allow and Block buttons. The event log keeps new devices, decisions, Wi-Fi connection attempts and router reboots.
Phones hide behind private MAC addresses and sometimes change them. When a newcomer looks like a device you already know, FlintGuard points it out, and one confirmation carries over its access, name and profile.
Rename devices, set their type and move them between parental-control profiles. Everything is stored on the router itself, so the router's own admin panel shows the same.
The app checks the router's home address and its Tailscale address and uses whichever answers. The saved password goes only to your own router: on iPhone it stays in the Keychain, and the web version doesn't store it at all.
System requirements
- GL.iNet GL-BE9300 (Flint 3) router; tested on firmware 4.10.1 (OpenWrt 23.05)
- iPhone with iOS 15 or later, or a browser on your home network for the web version served by the router
- The FlintGuard agent package on the router for new-device control, notifications and the event log
- Tailscale on the router and the phone for access away from home
FAQ
Is FlintGuard an official GL.iNet app?
No. It is an independent project, not affiliated with or endorsed by GL.iNet. It works through the router's own JSON-RPC API — the one its web admin panel uses.
Can I download it?
Not yet. FlintGuard is in development and runs on its author's router; the iPhone build is in internal TestFlight testing. There is no public release date.
Which routers does it support?
It is built for the GL.iNet GL-BE9300 (Flint 3) and tested on firmware 4.10.1. Other models haven't been tested.
Does it need anything installed on the router?
The device list, blocking, names and profiles work with the stock firmware. New-device alerts, Quarantine, Wi-Fi for approved devices and the event log need the FlintGuard agent — a small package installed on the router.
Do I have to open ports to reach the router from outside?
No. Away from home FlintGuard connects through Tailscale, and the router's admin interface stays closed to the internet.