Router with Word-Based Parental Control: Block Explicit Content in Institutions (TP-Link)

Question

Hello I mean a router that has a kind of parental control but I mean blocking after specific words, not website addresses, because it has every router. I have to block the possibility of displaying porn pages in one institution and the easiest way to do it on the router (blocking by the words:...

dt1 · Answer

Welcome.
In my opinion, this mechanism will be rather inefficient. Rather, it should not disturb on SSL secured pages (and there are more and more of them).

In my opinion, setting up a proxy server and forcing connected computers to use it would be more effective: https://www.howtoforge.com/filtering-https-traffic-with-squid

zwi · Answer

MikroTik RB962UiGS 5HacT2HnT hAP ac
You do what you want on Layer7, it requires some configuration knowledge.
I do not know if such sites fly over http or https but you have to check it yourself. Maybe there will be a problem with https, Snort?

Anonymous · Answer

Generally, it is difficult to comprehensively and effectively solve, so you need to implement several different options, and without Mikrotik functional equipment it will be difficult to do it.

One of the safeguards is DNS with blocking for unauthorized sites, set on the main router:
1) DNS Server: 208.67.222.123
2) DNS Server: 208.67.220.123

It also blocks https sites and lots of proxies. A list of examples of DNS servers blocking illegal content can be found here:
https://www.raymond.cc/blog/how-to-block-porn...-websites-without-spending-money-on-software/

For this to make sense you need to block the DNS change comp. on the Web.

bryko · Answer

any Mikrotik. Using Layer7 filters, I cut out YouTube access for some computers in my network (https).

vysoki · Answer

I have asus 1200G + (other models also have it) such as Yandex.DNS for filtering. You can set for which machines it should work:

Anonymous · Answer

Changing the DNS alone is not enough, you need to block the possibility for the user to enter another one, e.g. 8.8.8.8 on his device.

In addition, DNS should block proxies, hardly anyone does, of those I've checked, the one mentioned above is doing well. Otherwise, prohibited websites will be viewed through the first proxy gate operating via www / https.

Such blocking via DNS is possible and quite simple even on the cheapest Tp-Link, but it must have an alternative OpenWRT soft to redirect traffic from port 53 used by DNS.

jakisgosc · Answer

Thanks for all the answers. I didn't think about https. But the DNS lock seems enough.
MikroTik is a little afraid because I have never had contact, and I heard that the configuration is not easy, the equipment is also not cheap.
I didn't have any contact with Asus either, so I am the closest to Tplink and OpenWRT - although for the last time I did something 2 years ago - Gargoyle on a regular MR3420.
Jurek.adam you know if I can set it on any Tplink for any computers or do I need it for the whole network? Could you recommend a specific Tplink, which will calmly handle 10-20 devices on the network?
I also need to block torrents there, because I connect very slow in the woods and if 2 people launch torrents, the rest of the pages cannot be opened.

Anonymous · Answer

I would not go in Tp-Link as it would also be to block torrents and clients up to 20. I do not like Mikrotik, but even a fairly cheap model will be better than the more expensive Tp-Link.

bryko · Answer

The cheapest Mikrotik is less than PLN 90, so the high cost is not.

czuker · Answer

If it's an institution and has money, I recommend UTM class solutions

Router with Word-Based Parental Control: Block Explicit Content in Institutions (TP-Link)

Post #1

Post #2

Post #3

Post #4

Post #5

Post #6

Post #7

Post #8

Post #9

Post #10

Post #11

Topic summary