Parental control
From DD-WRT Wiki
Contents |
Parental Control Goals
The goals of parental control described herein below are as following:
- no internet access for children devices at night time
- no access to adult-only sites for children devices all the time
In general, every device on network is restricted except the well-known parental devices. It means that every household guest is restricted by default, e.g. when a child's friend comes to visit, they are restricted as well.
Separate Parental and Children Devices
To achieve parental control's goals we need to separate devices connected to network into two groups.
Parental Devices
In order to earmark parental devices we have to know their MAC addresses. If you don't know where to get these strange numbers, let's google out for a phrase how to find mac address.
Let's assume we have the following devices on the network:
Device | MAC Address |
---|---|
Mom's phone | 12:34:56:ab:cd:ef |
Dad's phone | 12:34:56:78:ab:cd |
Dad's notebook | 12:34:56:78:90:ab |
Son's tablet | aa:bb:cc:12:34:56 |
Daughter's phone | aa:bb:cc:dd:12:34 |
Children notebook | aa:bb:cc:dd:ee:12 |
Looking at the table we can see that first three devices are parental.
We assign a device to parental devices group by assigning static IP address from parental IP address range to the device. For purpose of this tutorial any device which has IP address from range 192.168.1.2 - 192.168.1.99 is considered as parental. In our case we assign static lease as following:
MAC Address | IP Address |
---|---|
12:34:56:ab:cd:ef | 192.168.1.2 |
12:34:56:78:ab:cd | 192.168.1.3 |
12:34:56:78:90:ab | 192.168.1.4 |
See Static DHCP Configuration to learn how to do it.
Note that some mobile devices with Android 5.1 Lollipop (e.g. VK 700x with firmware from end of 2015) and devices with newer iOS have "dynamic" MAC address which is changing after each Wi-Fi on/off and/or after each device restart. Such a device cannot be managed and always falls into the set of restricted devices.
Children Devices
Any device which is not listed in static IP address assignment is considered as children one. A device with no static lease obtains IP address from DHCP configured range. In our case we set the dynamic lease as following:
- Start IP address: 192.168.1.100
- Maximum DHCP Users: 50
This give us the IP address range 192.168.1.100 - 192.168.1.149 which we apply restrictions on.
See DHCP Server Configuration to learn how to do it.
No Internet Access for Children at Night
First goal of the parental control is cut out the children from internet at night time. In our case we want to deny internet access from 10pm to 6am. Due to policy' setup limitations we have to create 2 almost identical access policies as following:
Policy | 1 | 2 |
---|---|---|
Status | Enable | Enable |
Policy Name | No Internet Evening | No Internet Morning |
List of Clients
(IP Address Range) | 192.168.1.100 - 192.168.1.149 | 192.168.1.100 - 192.168.1.149 |
Deny / Filter | Deny | Deny |
Days | Everyday | Everyday |
Times | From 22:00 To 23:59 | From 0:00 To 5:59 |
See Denying Internet Access to learn how to do it.
No Access to Adult-Only Sites For Children
Second goal of parental control is to prevent children viewing websites with adult-only content like dating, nudity, pornography and/or drugs and weapons. The degree of prevention is up to your decision as you can see below. We need to integrate several services and settings to restrict the children from unwanted content.
OpenDNS
Create account...
DNS-O-Matic
Dynamic public IP address Create account...
Force DNS on Router
TBD
Prevent other DNS on Router
TBD