RT-AC66U Parental Control not working properly?

[Transon]

So I've been given the task to "control" my brothers network usage (mainly because he skips school alot) Anyways I recently got the Asus RT-AC66U and I've set up parental control on his items although hes able to use steam,skype and teamspeak whilst he is "denied" in the parental. Any idea to shut him out completely?  

[Elfuego]

use PfSense...

 

The Asus blocking is terrible... Netgear ones are ok but best solution is PFSense + locked DNS on his PC. Then Site whitelisting.

 

PPS: If he wants to circumvent the asus block all he has to do is HTTPS override.

 

You could also use something like K9; but man that gets irritating.

[Transon]

use PfSense...

 

The Asus blocking is terrible... Netgear ones are ok but best solution is PFSense + locked DNS on his PC. Then Site whitelisting.

 

PPS: If he wants to circumvent the asus block all he has to do is HTTPS override.

 

You could also use something like K9; but man that gets irritating.

So I install pfsense on the router or do I use it from my computer? I know about the https override, I feel like the asus blocking is hella bad, cant seem to be able to blacklist his mac address either. 

[Sir Asvald]

So I've been given the task to "control" my brothers network usage (mainly because he skips school alot) Anyways I recently got the Asus RT-AC66U and I've set up parental control on his items although hes able to use steam,skype and teamspeak whilst he is "denied" in the parental. Any idea to shut him out completely?

I use This for protection over the internet.

 

https://www.opendns.com/home-internet-security/parental-controls/opendns-home/

 

All you do is setup an account, enter your ISP IP Address. Then on his PC, set the DNS servers 208.68.220.220 or 208.67.222.222 or the main router

[Elfuego]

So I install pfsense on the router or do I use it from my computer? I know about the https override, I feel like the asus blocking is hella bad, cant seem to be able to blacklist his mac address either. 

 

Fun fact one of my clients was bragging about his filtering... took me less than 30 seconds to take down the (Asus) filter on the entire network...

 

I have a dedicated PC that acts as a firewall running PF-Sense, but there is no reason you cant run it on a home server in a VM and just point the DNS to it (it has complications but I have done it to do testing) -  but I think there are DD-WRT builds for routers with it Integrated which maybe easier (Check your router and if there are DD-WRT with PFsense integrated).

 

You could also run PFsense in your own VM but it requires it to be always on in your PC, and you would need to have a dualnic solution.

 

Open DNS is a really solid way to do it; as long as he doesnt have admin access or a modicum of technical skill to override the DNS server. It does however spam you with ads and is less secure than google DNS (IMO).

[Transon]

Fun fact one of my clients was bragging about his filtering... took me less than 30 seconds to take down the (Asus) filter on the entire network...

 

I have a dedicated PC that acts as a firewall running PF-Sense, but there is no reason you cant run it on a home server in a VM and just point the DNS to it (it has complications but I have done it to do testing) -  but I think there are DD-WRT builds for routers with it Integrated which maybe easier (Check your router and if there are DD-WRT with PFsense integrated).

 

You could also run PFsense in your own VM but it requires it to be always on in your PC, and you would need to have a dualnic solution.

 

Open DNS is a really solid way to do it; as long as he doesnt have admin access or a modicum of technical skill to override the DNS server. It does however spam you with ads and is less secure than google DNS (IMO).

Maybe that'll be a good use for my new server in the future As for the ease of breaking through I dont think that will be problem at all since he's the "computer is for gaming and nothing else" kinda kid so he hasn't bothered learning anything on it, he's clueless Thanks for the tips guys, I'll look into these programs! 

[Elfuego]

Maybe that'll be a good use for my new server in the future As for the ease of breaking through I dont think that will be problem at all since he's the "computer is for gaming and nothing else" kinda kid so he hasn't bothered learning anything on it, he's clueless Thanks for the tips guys, I'll look into these programs! 

 

Never underestimate denied access as a Motivator.. When at school one of the deputies introduced a whole bunch of measures to to try and block everything. It usually took me at most a day (or 2) to override whatever system he put in place that week (not because I was that fussed about playing games, or not having my PC remote controlled, but just because). Many people were asking me how to override it so they could game.