Parental controls being circumvented

RugbyPete81

What do you guys use?


I really want to lock down my router, and so, I dont want kids getting around dns protection of urls and other ways via browsers or vpn.


I was wondering if anyone had either a list of ips i should block ,ports i should block etc. that kids use to circumvent protection.


So far Ive:

disabled any VPN traffic

Disabled puffin browser IP addresses

Using OpenDNS with all DNS queried forced to their servers (i found them changing their dns to google)

Installed qustudio which protects when away from home.


I have had 'the conversation' on it prior but so far only trust is keeping the door locked on say TOR and getting around the protection ive put in, and was let down when puffin browser went around my dns and found hardcore stuff on the kids browser.
the kids wnated to get onto the dark web because it was cool - not realising the dangers.



Tor ive not found a solution for but id like to lock everything else if possible. They arent THAT tech savvy but will googl ethings like "how to get around open dns, how to get around all chld protection with a vpn" and so on

Not after a moral fight on the pros and cons but after those who believe in protecting kids from themselves, especially when it comes to adult material.

I have DD-WRT

arciere

Not sure how old your kids are, but my opinion is that if control becomes too technical, then you are probably dealing with the problem from the wrong perspective.
I'm not saying you shouldn't be blocking what you reckon your kids shouldn't have access to, but given that you can't block the whole world (internet-speaking), I would find a compromise and try to deal with the 'situation' in a different way, sometimes keeping an eye on them is much more efficient than erecting (fire)walls.
Frankly speaking, if a kid is determined to go to adult websites, he/she will always find a way.
(this is what I think, I'm in no way trying to suggest you how you should raise your children!)

Undervalued

RugbyPete81 wrote: »

Not after a moral fight on the pros and cons but after those who believe in protecting kids from themselves, especially when it comes to adult material.

I have DD-WRT

OK, this is not a "moral" comment but a practical one.....

There is no level of security you can realistically set on a domestic router that will defeat somebody with sufficient technical skills, as you are already finding out.

Even if you did, what stops the kids (who are clearly very computer literate) from logging on to next door's presumably far less secure setup?

Or, they simply get a PAYG sim card and make their phone (or a mate's) into a hotspot. etc, etc

Do you rely on equally elaborate physical barriers to prevent them from disobeying your wishes in other ways? Why is the internet different?

I think what I am saying is you need to devote your efforts to further attempts to get them to understand the dangers rather than relying on technology which will never been 100%.

Sorry.

RugbyPete81

Well, its no longer more about dangers but the need to look at things being done to naked women!


Id like to control that, where possuible. theres nothing in the world he would reason with as his response is "its natural". What do i say to that? "your a child"? "dont look?"



He's a teenager now, and so, hes hungry.

wongataa

Enforce the rule that the computer has to be used in the lounge/dining room of the house. Then you can keep an eye on what is being looked at.

Undervalued

RugbyPete81 wrote: »

Well, its no longer more about dangers but the need to look at things being done to naked women!


Id like to control that, where possuible. theres nothing in the world he would reason with as his response is "its natural". What do i say to that? "your a child"? "dont look?"



He's a teenager now, and so, hes hungry.

You can't, certainly not anywhere near 100%. You have already done far more from a technical point of view than the vast majority of parents could manage.

You have got to approach this from a different angle.

arciere

RugbyPete81 wrote: »

He's a teenager now, and so, hes hungry.

And who wasn't at that age?

Just trying to be realistic, if he wants to go to adult websites on purpose, then there's nothing you can do to stop him. The more you do, the more he will want to break the rules.
If he doesn't care about going to those kind of websites, then you shouldn't need to worry, you've already done more than enough from a technical point of view.

Dewhirstn

It's very difficult in all honesty, there is always a back door or a way around it.

I was very good at finding the ways to get around the protection when I was younger.

I think the only way is not to so much try and stop them, but explain to them the risks of what they are doing.

The dark web in particular is an incredibly scary place that even as an adult I don't venture near.

AndyPix

Dewhirstn wrote: »

The dark web in particular is an incredibly scary place .

No it's not . It might contain some sick stuff but you would have to go searching for it to see it.


What you are saying is akin to saying a "murderer lives in the UK therefore the UK is a very scary place !"

RugbyPete81

It all comes down to maturity and how you handle content, however we have a child here that unless you say "put your phone down your spilling your soup into your lap!" or wireless timed to go off at 10pm, he will be on it 24/7.

He has almost an ADHD/autism and lacks all common sense - so, he wanted the dark web because he wanted to try to buy drugs and guns to show off with his mates not realising doing so could land him in prison. Put a noose around his neck to find out what it might be like to hang himself (when we weren't home) and luckily didnt have the brains to do it from something strong (why have you got a red neck mate?), tried to smoke a receipt because he saw a youtube video and nearly burned the house down, Tried to freeze his tongue with a can of aerosol not realising if it got in his lungs the gas is heavy and would suffocate him.


We have a special case here - zero sense, low intelligence, highly influenced and when he does go on p*rn sites we know about it because he's not descrete, hesnaked in his room "dont come in im naked!!" and there's 'stuff' all over the place. As a step dad, I dont want to see that !


So for that, no he's not exactly capable of being an adult online.. I took down his facebook account because he thought being called HailHitler might be funny and join lots of right wing groupsyet as I explain he might need to get a job some-day, and if anyone linked it to him it would be socially detrimental!

Ideally id like him offline completely, but as kids are today, they all communicate online and he has a mother who isnt strict in that way. I stillw ant him to integrate where possible so he has internet and plays games online


My other two girls, are fine. They're intelligent, descrete, respectful and road aware and if they ever did dip into those areas I dont know about it. If that was the case here with the boy, I wouldnt be having this conversation.



So, now the life-story is out, I could do with some real ideas, ive not seen anyone block puffin browser but i found that one by chance. Opera browser i think uses a VPN, i wonder if there are some quick wins and ip's we could block, UTM has application and deep packet inspection but im unsure exactly how to get a virtual machine into the right place on my LAN.

Other options i packet capture, find the ports his pc is using for steam and disallow all others

neilmcl

RugbyPete81 wrote: »

My other two girls, are fine. They're intelligent, descrete, respectful and road aware and if they ever did dip into those areas I dont know about it. If that was the case here with the boy, I wouldnt be having this conversation.

Are you really saying that if your boy was discreet about it you wouldn't be that bothered. This is sounding more and more like your problem rather than the kids.