adult site blocking

[keef]

Hello. I have an Asus RT-AC87u with Merlin, Skynet and AB-Solution Ad-Blocker running. I was sure Skynet blocked porn until I saw my kid on Playboy the other evening. I have a list of porn sites to block (http://pasted.co/b2dc3032) however I am unsure how to import them into Skynet.

I tried using OpenDNS Family Shield with Skynet without success.

any help is appreciated

Thanks, Bj

 

[Droma]

I'm also very interesting how the best block porn etc.

 

[ColinTaylor]

You might get a faster response if you post your question in the Merlin forum or Skynet thread.

 

[sfx2000]

I was sure Skynet blocked porn until I saw my kid on Playboy the other evening

Are you certain he's not on a VPN?

Facebook has a free one these days...

 

[RMerlin]

AiProtection's Parental Control should allow you to chose which categories of website you allow for specific MAC addresses. You could add the MAC of your kid's devices to it.

 

[sfx2000]

AiProtection's Parental Control should allow you to chose which categories of website you allow for specific MAC addresses. You could add the MAC of your kid's devices to it.

Two seconds of Google on how to change a MAC address on Android

https://www.techpluto.com/how-to-temporarily-change-android-mac-address-without-rooting/

Kids move fast these days - and they're pretty adept at things - they grew up with tech...

 

[OGroteKoning]

Two seconds of Google on how to change a MAC address on Android

https://www.techpluto.com/how-to-temporarily-change-android-mac-address-without-rooting/

Kids move fast these days - and they're pretty adept at things - they grew up with tech...

Most will know I am pretty noob with this stuff - but can't you just permit your mac addresses and then provide a static IP and then do what Merlin suggested?

 

[roguetr]

If your kid has admin access to any device then your going to be hard pressed blocking proxies, external DNS, VPNs, free hotspots and mobile broadband access.

MAC address restrictions work but you need to be using an allowed list so anything a MAC is changed to, is blocked.

If your super paranoid or worried you need to block most of everything outbound (bar port 80) and do transparent proxying. Outside of DNS blocks and site restrictions, you can't control/filter HTTPS easily.

I haven't played with the extent of AiProtection's capabilities for blocking/filtering but you'll get far better granular control with something like OpenWRT that you build up to what you think you need. Merlin/AiProtection is still fantastic from an end consumer perspective though and is way less fiddly for providing an adequate solution with features you generally won't see or replicate elsewhere (for free).

If your kid has mobile broadband though, none of this really matters, the porn will just be cheaper at home

Sent from my MI 5 using Tapatalk

 

[roguetr]

Hah, I found this thread from a while back ...

https://r.tapatalk.com/shareLink?ur...&share_tid=28124&share_fid=52425&share_type=t

Sent from my SM-T815Y using Tapatalk

 

[roguetr]

One other thought ... I, like most people, tend to set an open policy in dnsfilter and then restrict individual devices, as it mimicks parental controls. You could go the other way and globally restrict and then open up for allowed devices. At least occupying an existing MAC is a little more difficult *shrug*

Of course VPN connections are still possible ... and you'd have to block external dns access ... and probably a whole heap of other possibilities I haven't considered.

Besides the "block everything and transparently redirect port 80" option, I have had success with the walled garden/hotspot type solution for wired clients. Normally you'd configure that on a wifi device but I found you could bind it to wired ports as well. I only did this so I could feed it to a dumb AP but it worked. No matter what the MAC the client was restricted to whatever confinements I'd specified. This is not something you'll be doing on asuswrt however.

Sent from my SM-T815Y using Tapatalk

 

[sfx2000]

If your kid has mobile broadband though, none of this really matters, the porn will just be cheaper at home

Maybe just have a serious talk with the little one...

 

[roguetr]

Maybe just have a serious talk with the little one...

There was plenty of parental advice in the thread I listed, thought I'd go with the technical answer ... and the obvious

Sent from my MI 5 using Tapatalk

 

[sfx2000]

There was plenty of parental advice in the thread I listed, thought I'd go with the technical answer ... and the obvious

Sent from my MI 5 using Tapatalk

There are DNS based solutions available from third parties - that can help - same goes with site blacklisting similar to ad-blocking solutions...

That helps with the home WAN-LAN situation - but then one has to consider 4G-LTE on smartphones (including wifi hotspot mode) and VPN... (for example - facebook's IOS app offers free VPN through the Onavo app).

Tech can help... but not always the total answer.

 

[roguetr]

There are DNS based solutions available from third parties - that can help - same goes with site blacklisting similar to ad-blocking solutions...

That helps with the home WAN-LAN situation - but then one has to consider 4G-LTE on smartphones (including wifi hotspot mode) and VPN... (for example - facebook's IOS app offers free VPN through the Onavo app).

Tech can help... but not always the total answer.

Yep, you basically paraphrased everything I just said above, it's almost like you read what I posted

Seriously though, that's the whole point of dnsfilter in AiProtection, if you use it correctly. and I went over mobile broadband and VPNs etc.

Sent from my MI 5 using Tapatalk