Help me choose nice router for parental control

[rdavuluri44]

Hi folks, my internet service is CGNAT (jio,india) and their crappy GPON modem refuses to allow bridging
so i end up with what you call.. triple NAT

my primary requirement is parental control and i've a working Asus N66 with tomato FW

i tried content filtering with OpenDNS but its not working maybe coz of those shared public IP

access restriction in tomato is not an ideal solution for me as i never want to block all internet


would be great to get answers for below:

1) parental control in asus is based on dns filtration?
so it doesn't work in my triple-NAT setup?
or the latest models that come with AiMesh & Trend Micro internet security and parental controls work in my situation?

2) parental ctrl is divided into 'web & app filters' and 'time scheduling'
is there anyway i can setup a web filter to work in certain time?
mixing both features possible?

3) how to setup this exactly?
i want to restrict few apps like youtube during day time and allow them in the evening (say 5-7pm)

4) will it help me to install merlin 380.70 fw on my N66U?

pls help, thanks

 

[Tech9]

Newer Asus routers running TrendMicro engine use app analysis method. You need RT-AC66U B1 model router or better. I don't know what routers are available in India, but look for AiProtection and Adaptive QoS in specifications - this a good indication TrendMicro engine is included in firmware. If you choose Asuswrt-Merlin supported model, a custom script called Diversion does DNS filtering with option for custom block lists.

 

[bbunge]

Whatever solution you choose that will be easy for you can and will be defeated by the children in time. My Asus router, RT-AX86U can do a good job of blocking malware and adult sites. The Asus Android and iOS router app incorporates good controls to enable filtering of individual clients. I tested this yesterday with a tablet and desktop PC. With the Adult Filter enabled I received a could not connect error when trying to access an "adult" web site. However, when I enabled DoH in my Firefox browser I was able to connect to the "adult" website. Thus, Asus is only blocking the DNS.

Using an Asus router would be a good start. One of the lower end AX routers would be a good place to start as they all have AiProtect. There are some new features mentioned in the next Asus major firmware release that should be out in a couple of months.
Also, good parenting is your best bet for home network safety. If the children will not listen to your request to not visit sites or use apps, take the devices away from them. That is your call to do so and it is not child abuse.

 

[Tech9]

my primary requirement is parental control and i've a working Asus N66 with tomato FW

One thing to try with no added cost is John's fork with more up to date security updates, DNSFilter to selected devices and SafeBrowsing DNS with free Family Filter. According to description - Blocks access to all adult, pornographic and explicit sites. It also blocks proxy and VPN domains that are used to bypass the filters. Mixed content sites (like Reddit) are also blocked. Google, Bing and Youtube are set to the Safe Mode. Malicious and Phishing domains are blocked. This is one of the popular trusted filtering DNS services used in schools, offices, etc. It may be enough for your needs.

 

[rdavuluri44]

Hi, thanks for suggestions
so glad to know i dont have to change my NATed ISP

first i'll try putting John's Fork on my N66U
will buy RT-AC68U if it doesn't work

this DoH is another threat to parent controls
they should give some slack to parents and corporates who wish to control the traffic in the network for good reasons. no?

2) parental ctrl is divided into 'web & app filters' and 'time scheduling'
is there anyway i can setup a web filter to work in certain time?
mixing both features possible?

3) how to setup this exactly?
i want to restrict few apps like youtube during day time and allow them in the evening (say 5-7pm)

appreciate any comments or suggestions on my above question
thanks

 

[Tech9]

this DoH is another threat to parent controls

Block lists with known DoH servers are available. Diversion script may help for Asuswrt-Merlin supported routers.

 

[rdavuluri44]

Hi, i installed John's fork
no luck with dns filtering with my NATed ISP

i think app based controls in newer routers is the only way to go

i may have to change either my ISP or the router
thank you guys

 

[BreakingDad]

Can't you add server=/use-application-dns.net/ to dnsmasq to prevent DOH on FF ?

As below ?

[https://www.snbforums.com/threads/disabling-firefoxs-automatic-switch-to-doh.58910/

 

[Tech9]

no luck with dns filtering with my NATed ISP

You have to do it locally.

Pi-Hole can filter whatever you want and works with every router. Runs on Raspberry Pi.

Pi-hole – Network-wide Ad Blocking

pi-hole.net

Asuswrt-Merlin supported routers have Diversion option - light-weight router optimized DNS-blocker.

About Diversion - Diversion

diversion.ch

and another AdGuard Home option.

AdGuardHome - [RELEASE] Asuswrt-Merlin-AdGuardHome-Installer (AMAGHI)

Asuswrt-Merlin-AdGuardHome-Installer The Official Installer of AdGuardHome for Asuswrt-Merlin Requirements: ARM based ASUS routers (not bridges or access points) that use Asuswrt-Merlin Firmware JFFS support and enabled REQUIRES ENTWARE(!) for package management, and a separate USB drive for...

www.snbforums.com