What's new

adult site blocking

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

keef

Senior Member
Hello. I have an Asus RT-AC87u with Merlin, Skynet and AB-Solution Ad-Blocker running. I was sure Skynet blocked porn until I saw my kid on Playboy the other evening. I have a list of porn sites to block (http://pasted.co/b2dc3032) however I am unsure how to import them into Skynet.

I tried using OpenDNS Family Shield with Skynet without success.

any help is appreciated

Thanks, Bj
 
You might get a faster response if you post your question in the Merlin forum or Skynet thread.
 
AiProtection's Parental Control should allow you to chose which categories of website you allow for specific MAC addresses. You could add the MAC of your kid's devices to it.
 
If your kid has admin access to any device then your going to be hard pressed blocking proxies, external DNS, VPNs, free hotspots and mobile broadband access.

MAC address restrictions work but you need to be using an allowed list so anything a MAC is changed to, is blocked.

If your super paranoid or worried you need to block most of everything outbound (bar port 80) and do transparent proxying. Outside of DNS blocks and site restrictions, you can't control/filter HTTPS easily.

I haven't played with the extent of AiProtection's capabilities for blocking/filtering but you'll get far better granular control with something like OpenWRT that you build up to what you think you need. Merlin/AiProtection is still fantastic from an end consumer perspective though and is way less fiddly for providing an adequate solution with features you generally won't see or replicate elsewhere (for free).

If your kid has mobile broadband though, none of this really matters, the porn will just be cheaper at home ;)

Sent from my MI 5 using Tapatalk
 
One other thought ... I, like most people, tend to set an open policy in dnsfilter and then restrict individual devices, as it mimicks parental controls. You could go the other way and globally restrict and then open up for allowed devices. At least occupying an existing MAC is a little more difficult *shrug*

Of course VPN connections are still possible ... and you'd have to block external dns access ... and probably a whole heap of other possibilities I haven't considered.

Besides the "block everything and transparently redirect port 80" option, I have had success with the walled garden/hotspot type solution for wired clients. Normally you'd configure that on a wifi device but I found you could bind it to wired ports as well. I only did this so I could feed it to a dumb AP but it worked. No matter what the MAC the client was restricted to whatever confinements I'd specified. This is not something you'll be doing on asuswrt however.

Sent from my SM-T815Y using Tapatalk
 
There was plenty of parental advice in the thread I listed, thought I'd go with the technical answer ... and the obvious :D

Sent from my MI 5 using Tapatalk

There are DNS based solutions available from third parties - that can help - same goes with site blacklisting similar to ad-blocking solutions...

That helps with the home WAN-LAN situation - but then one has to consider 4G-LTE on smartphones (including wifi hotspot mode) and VPN... (for example - facebook's IOS app offers free VPN through the Onavo app).

Tech can help... but not always the total answer.
 
There are DNS based solutions available from third parties - that can help - same goes with site blacklisting similar to ad-blocking solutions...

That helps with the home WAN-LAN situation - but then one has to consider 4G-LTE on smartphones (including wifi hotspot mode) and VPN... (for example - facebook's IOS app offers free VPN through the Onavo app).

Tech can help... but not always the total answer.

Yep, you basically paraphrased everything I just said above, it's almost like you read what I posted :D

Seriously though, that's the whole point of dnsfilter in AiProtection, if you use it correctly. and I went over mobile broadband and VPNs etc.

Sent from my MI 5 using Tapatalk
 
Last edited:

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top