diff --git a/include/target.mk b/include/target.mk
index 9175d99d23..b6c09e3600 100644
--- a/include/target.mk
+++ b/include/target.mk
@@ -18,8 +18,7 @@ kmod-nf-nathelper kmod-nf-nathelper-extra kmod-ipt-raw \
 default-settings luci luci-app-ddns luci-app-sqm luci-app-upnp luci-app-adbyby-plus luci-app-autoreboot \
 luci-app-filetransfer luci-app-ssr-plus luci-app-vsftpd ddns-scripts_aliyun luci-app-xlnetacc \
 luci-app-pptp-server luci-app-arpbind luci-app-vlmcsd luci-app-wifischedule luci-app-wol luci-app-ramfree \
-luci-app-sfe luci-app-flowoffload luci-app-nlbwmon luci-app-wrtbwmon luci-app-usb-printer luci-app-webadmin luci-app-wireguard \
-luci-app-mwan3helper luci-app-syncdial
+luci-app-sfe luci-app-flowoffload luci-app-nlbwmon luci-app-wrtbwmon luci-app-usb-printer
 # For nas targets
 DEFAULT_PACKAGES.nas:=fdisk lsblk mdadm automount autosamba luci-app-usb-printer 
 # For router targets
diff --git a/package/lean/luci-app-accesscontrol/Makefile b/package/lean/luci-app-accesscontrol/Makefile
new file mode 100644
index 0000000000..92066d6b08
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/Makefile
@@ -0,0 +1,18 @@
+
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI Access Control Configuration
+LUCI_DEPENDS:=
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-accesscontrol
+PKG_VERSION:=1
+PKG_RELEASE:=3
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-app-accesscontrol/luasrc/controller/access_control.lua b/package/lean/luci-app-accesscontrol/luasrc/controller/access_control.lua
new file mode 100644
index 0000000000..2f1ae7af1d
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/luasrc/controller/access_control.lua
@@ -0,0 +1,27 @@
+--[[
+LuCI - Lua Configuration Interface - Internet access control
+
+Copyright 2015 Krzysztof Szuster.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+module("luci.controller.access_control", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/firewall") then
+		return
+	end
+--	if not nixio.fs.access("/etc/config/access_control") then
+--		return
+--	end
+	
+
+	entry({"admin", "services", "access_control"}, cbi("access_control"), _("Internet Access Schedule Control"), 10).dependent = true
+end
diff --git a/package/lean/luci-app-accesscontrol/luasrc/model/cbi/access_control.lua b/package/lean/luci-app-accesscontrol/luasrc/model/cbi/access_control.lua
new file mode 100644
index 0000000000..be4fa4b049
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/luasrc/model/cbi/access_control.lua
@@ -0,0 +1,166 @@
+--[[
+LuCI - Lua Configuration Interface - Internet access control
+
+Copyright 2015 Krzysztof Szuster.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+local CONFIG_FILE_RULES = "firewall"  
+local CONFIG_FILE_AC    = "access_control"
+local ma, mr, s, o
+
+ma = Map(CONFIG_FILE_AC, translate("Internet Access Schedule Control"),
+    translate("Access Schedule Control Settins"))
+if CONFIG_FILE_AC==CONFIG_FILE_RULES then
+    mr = ma
+else
+    mr = Map(CONFIG_FILE_RULES)
+end
+---------------------------------------------------------------------------------------------
+--  General switch
+
+s = ma:section(NamedSection, "general", "access_control")
+    o_global_enable = s:option(Flag, "enabled", translate("Enabled"))
+        o_global_enable.rmempty = false
+        
+---------------------------------------------------------------------------------------------
+-- Rule table
+
+s = mr:section(TypedSection, "rule", translate("Client Rules"))
+    s.addremove = true
+    s.anonymous = true
+--    s.sortable  = true
+    s.template = "cbi/tblsection"
+    -- hidden, constant options
+    s.defaults.enabled = "0"
+    s.defaults.src     = "*" --"lan", "guest" or enything on local side
+    s.defaults.dest    = "wan"
+    s.defaults.target  = "REJECT"
+    s.defaults.proto    = "0"
+    s.defaults.extra = "--kerneltz"
+    
+    -- only AC-related rules
+    s.filter = function(self, section)
+	      return self.map:get (section, "ac_enabled") ~= nil
+    end
+        
+    o = s:option(Flag, "ac_enabled", translate("Enabled"))
+        o.default = '1'
+        o.rmempty  = false
+    
+        -- ammend "enabled" option and set weekdays  
+        function o.write(self, section, value)
+            wd_write (self, section, value)
+            local key = o_global_enable:cbid (o_global_enable.section.section)
+            --  "cbid.access_control.general.enabled"
+            local global_enable = o_global_enable.map:formvalue (key)
+            if global_enable == "1" then
+                self.map:set(section, "enabled", value)
+            else
+                self.map:set(section, "enabled", "0")
+            end	
+--            self.map:set(section, "src",  "*")
+--            self.map:set(section, "dest", "wan")
+--            self.map:set(section, "target", "REJECT")
+--            self.map:set(section, "proto", "0")
+--            self.map:set(section, "extra", "--kerneltz")
+            return Flag.write(self, section, value)
+        end
+      
+    o = s:option(Value, "name", translate("Description"))
+--        o.rmempty = false  -- force validate
+--        -- better validate, then: o.datatype = "minlength(1)"
+--        o.validate = function(self, val, sid)
+--            if type(val) ~= "string" or #val == 0 then
+--                return nil, translate("Name must be specified!")
+--            end
+--            return val
+--        end
+        
+     o = s:option(Value, "src_mac", translate("MAC address (Computer Name)")) 
+        o.rmempty = false
+        o.datatype = "macaddr"
+        luci.sys.net.mac_hints(function(mac, name)
+            o:value(mac, "%s (%s)" %{ mac, name })
+        end)
+
+    function validate_time(self, value, section)
+        local hh, mm
+        hh,mm = string.match (value, "^(%d?%d):(%d%d)$")
+        hh = tonumber (hh)
+        mm = tonumber (mm)
+        if hh and mm and hh <= 23 and mm <= 59 then
+            return value
+        else
+            return nil, "Time value must be HH:MM or empty"
+        end
+    end
+    o = s:option(Value, "start_time", translate("Start time"))
+        o.rmempty = true  -- do not validae blank
+        o.validate = validate_time 
+        o.size = 5
+    o = s:option(Value, "stop_time", translate("End time")) 
+        o.rmempty = true  -- do not validae blank
+        o.validate = validate_time
+        o.size = 5
+
+    local Days = {'mon','tue','wed','thu','fri','sat','sun'}
+    local Days1 = translate('MTWTFSS')
+    
+    function make_day (nday)
+        local day = Days[nday]
+        local label = Days1:sub (nday,nday)
+        local o = s:option(Flag, day, label)
+        o.default = '1'
+        o.rmempty = false  --  always call write
+        
+        -- read from weekdays actually
+        function o.cfgvalue(self, s)
+            local days = self.map:get (s, "weekdays")
+            if days==nil then
+                return '1'
+            end
+            return string.find (days, day) and '1' or '0'
+        end
+     
+        --  prevent saveing option in config file   
+        function o.write(self, section, value)
+            self.map:set(section, self.option, '')
+        end
+    end
+  
+    for i=1,7 do   
+        make_day (i)
+    end   
+    
+    function wd_write(self, section, value)
+        value=''
+        local cnt=0
+        for _,day in ipairs (Days) do
+            local key = "cbid."..self.map.config.."."..section.."."..day
+--io.stderr:write (tostring(key)..'='..tostring(mr:formvalue(key))..'\n')
+            if mr:formvalue(key) then
+                value = value..' '..day
+                cnt = cnt+1
+            end
+        end
+        if cnt==7  then  --all days means no filterung 
+            value = ''
+        end
+        self.map:set(section, "weekdays", value)
+    end
+
+
+if CONFIG_FILE_AC==CONFIG_FILE_RULES then
+  return ma
+else
+  return ma, mr
+end
+
diff --git a/package/lean/luci-app-accesscontrol/po/zh-cn/access_control.po b/package/lean/luci-app-accesscontrol/po/zh-cn/access_control.po
new file mode 100644
index 0000000000..9f710c69a1
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/po/zh-cn/access_control.po
@@ -0,0 +1,26 @@
+msgid "Internet Access Schedule Control"
+msgstr "上网时间控制"
+
+msgid "Access Schedule Control Settins"
+msgstr "设置客户端禁止访问互联网的时间"
+
+msgid "General switch"
+msgstr "开启/关闭"
+
+msgid "Client Rules"
+msgstr "客户端规则"
+
+msgid "Description"
+msgstr "描述"
+
+msgid "MAC address (Computer Name)"
+msgstr "MAC 地址 (主机名)"
+
+msgid "Start time"
+msgstr "开始时间"
+
+msgid "End time"
+msgstr "结束时间"
+
+
+
diff --git a/package/lean/luci-app-accesscontrol/root/etc/config/access_control b/package/lean/luci-app-accesscontrol/root/etc/config/access_control
new file mode 100644
index 0000000000..db263bc382
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/root/etc/config/access_control
@@ -0,0 +1,4 @@
+
+config access_control 'general'
+	option enabled '0'
+