Parental controls being circumvented

arciere

esuhl wrote: »

Have you tried setting up a firewall rule on your router to block DNS servers other than OpenDNS?


https://support.opendns.com/hc/en-us/articles/227988027-How-to-prevent-users-from-circumventing-OpenDNS-using-firewall-rules

If you want to go to a specific website, you can bypass DNS altogether by using the IP address of the website instead of its hostname.

debitcardmayhem

arciere wrote: »

If you want to go to a specific website, you can bypass DNS altogether by using the IP address of the website instead of its hostname.

Yeah but you will need to add the ip address/name to your local hosts to be able to use https

that

arciere wrote: »

a) what? You'll never get two 'identical' wifi signals. You may get the same SSID, but not the same BSSID. You can't (easily) change the MAC address of an access point (don't confuse router and access point, it's two separate devices)

[STRIKE]On my router I can change the mac.[/STRIKE] The OP has a software defined router and very strongly suspect he can do the same.

b) Disable the WiFi on the router maybe? There are hundreds of less-intrusive solutions to stop the WiFi

Yes there are, but the above method is damn hard to detect, makes it look like his wifi is actually working and not disabled. The aim is to hopefully will poison his local wifi, rather than disable it. As I said I have not tried this method, but think it may work?

c) Why would you use a dmz?

You can add all your bits of kit into the dmz and neither the outside or inside will find the boxes used. Any filtering or monitoring you do not inside of the dmz can be picked up or compromised far more easily. You never know what is in the dmz. Probably outside the scope of the OP, but an old pc with a few virtual devices on it that are free could be a doable dmz?

As governments know who spend millions to block their citizens, it is very hard to do, and often futile.

arciere

that wrote: »

On my router I can change the mac.

Just for my curiosity, what model do you have? Can you change the MAC address of your Ethernet port (or the router) or the MAC address of the WiFi interface?

that

arciere wrote: »

Just for my curiosity, what model do you have? Can you change the MAC address of your Ethernet port (or the router) or the MAC address of the WiFi interface?

Your post made me question myself, and I was wrong . Looking at it again, I can change the mac, but only on the isp facing end. I can support 4 ssid though on my draytek wifi, i can not change the bssid

The two signals on the same channel will corrupt each other.

dd-wrt can do multiple bssid as listed http://www.pennock.nl/dd-wrt/Multiple_BSSIDs.html

Ta

arciere

that wrote: »

Your post made me question myself, and I was wrong . Looking at it again, I can change the mac, but only on the isp facing end. I can support 4 ssid though on my draytek wifi, i can not change the bssid

Thanks for checking. I also have a Draytek, but I can't see any option that allows you to change the MAC address of the WAN port.
Never mind, just curious.

that

arciere wrote: »

Thanks for checking. I also have a Draytek, but I can't see any option that allows you to change the MAC address of the WAN port.
Never mind, just curious.

i have an old 2820n. Beside the colours below, the menu and item position are very close in the web interface in the right most bottom quarter.


The draytek is good, though I nearly purchase a dd-wrt one from another brand. After looking around and quite a bit of reading, think I will no longer purchasing a router. Next time will put the stock router into bridge mode and let the router run through a pc with 2 intel nics, possible a wifi card too? and run open source OPNSENSE or IPSENSE or Sophos UTM, but for ike2 SWANSONG is the one apparently. Tested non of the above yet, but ikev2 is brilliant and fast

arciere

that wrote: »

The draytek is good, though I nearly purchase a dd-wrt one from another brand. After looking around and quite a bit of reading, think I will no longer purchasing a router. Next time will put the stock router into bridge mode and let the router run through a pc with 2 intel nics, possible a wifi card too? and run open source OPNSENSE or IPSENSE or Sophos UTM, but for ike2 SWANSONG is the one apparently. Tested non of the above yet, but ikev2 is brilliant and fast

If you do, let me know, I have a 2860 but wouldn't mind experimenting with Sophos.