OUR NETWORK:TiVo Community TechLore Explore3DTV DVRplayground Dijit Community See all... About UsAdvertiseContact Us

How To Set Up Parental Controls On Toastman's Tomato Firmware for WNR3500L

The Internet is a scary place. Now, I'm not a parent yet--but if I were, I'd want to at least try to impose some realistic limits on the internet for my kids. I'm not into shielding kids from too much, but some things (and some sites) just cannot be un-seen, as you may possibly know but not care to admit. Plus, it's probably nice to know that your kids can't browse the Internet a 3 in the morning when they have school in only a few hours.

Fortunately, if you have a WNR3500L, you can use Toastman's excellent Tomato firmware build to set up a variety of settings to restrict Internet access on your router. Here's how.

If you haven't snagged the latest version of Toastman's Tomato build for your WNR3500L, you'll need it to proceed. Click here to download it, and here for information on how to install it before proceeding.

[Purchase a NETGEAR WNR3500L]

Monitoring Web Usage

If you don't want to restrict usage in your household--but would like an idea of what's going on, this firmware has the ability to track virtually all Internet activity going through the router. It's automatic and easy to set up.

Head over to the administration panel, then "Logging." Simply check the "Monitor Web Usage" option. You can select to monitor all machines, or select an individual machine, as well as how many line items to remember.

In this way, you can see what sites are being accessed by your Internet connection.

Blocking Access Entirely

These days, it's probably an extremely severe form of punishment to banish a kid from the Internet. I know if I had to go without for more than a day, I'd probably explode. Here's how to block access entirely to a certain machine.

Head to the Basic => Wireless Filter panel. From here, you can enter the MAC address of the unique machine or machines you would like to add to the block list.

Unsure which devices are which? You can head to the Basic => Device List panel and see the MAC and IP addresses of each device connected to your network, sometimes with a device name or description.

Of course, there are probably creative ways around this MAC address restriction, but if your kid figures out how to do this, perhaps they have a career in programming, engineering, or a similar geeky field ahead of them :)

Scheduled Access Restriction

You can also restrict access by day and time. This is useful if you actually want your kids to go to bed at a certain time instead of staying up and playing Minecraft all night, which is what I would have done had Minecraft existed in the 80's.

In the Access Restriction panel, you have the ability once again to set up rules for all machines or for specific MAC addresses. You can set up a time and date schedule to restrict access. Pretty simple!

Restricting Certain Sites or Activities

Perhaps you don't care as much about scheduling timed restrictions, but more about certain sites--say your child is particularly fond of Miniclip and they are now grounded from it, or there was a particularly nefarious domain you caught them peeping at once.

Simply uncheck the "Block All Internet Access" option at the bottom of the Access Restrictions screen and you'll see a whole new pane of options pop up. There's a TON of custom options available here--you can block certain sites or certain types of traffic (e.g., P2P, etc.)

Conclusions

In addition to being a robust firmware on its own, I was surprised to see the multitude of restriction options in this firmware. It's so easy to use and install, and with these options, I can heartily recommend it as a firmware ideal for family home use.

[Purchase a NETGEAR WNR3500L]

Tags : access restrictionparentingsecuritytoastmantomatownr3500l

Discussion:    Add a Comment | Comments 1-5 of 5 | Latest Comment

March 31, 2011 9:48 AM

You could also use opendns.com for more granular or broad approach.  

Setup your free OpenDNS account on www.opendns.com

There are a variety of options, but there is a free one.  You can configure logging if you want.  Additionally you can set a level of things to block.  The advantage here is that you could block things you don't know about.  A blacklist/whitelist works only if you know everything one might search for. 

Make sure to setup the option to allow for dynamic ip updates:

Settings -> Advanced Settings ->  check Enable Dynamic IP Update

Setup Tomato to automatically use OpenDNS servers

Tomato makes it really easy.  Using the DDNS and setup OpenDNS. 

Basic -> DDNS -> OpenDNS

I only have 1 network, so I left Network blank.  If you want to use OpenDNS as your default DNS Servers (you probably do) then select this.

Now, a saavy person can just change their DNS settings.  There might be a tool you could use, or even group policy to prevent users from changing it but I don't know.

March 31, 2011 9:50 AM

Additionally, if you wanted to have free unfettered internet use for.. adult purposes.. you could just change your DNS servers on your TCP connection. This would bypass opendns but still leave it set for the network.

April 1, 2011 1:47 AM

DigitaLasagna said: Additionally, if you wanted to have free unfettered internet use for.. adult purposes.. you could just change your DNS servers on your TCP connection. This would bypass opendns but still leave it set for the network.

It is not recommanded to enable DNS bypassing, as kids will rapidly find via google that setting different DNS servers on their computers will bypass your protection....

So you must check 'intercept port 53' on the DNS page, so every DNS query going through port 53 will go through OpenDNS. And evidently DNS servers must be set to OpenDNS ones....

In addition, you must add 'strict-order'  in the 'Custom dnsmasq'  area (DNS page of Tomato GUI), instead Tomato could use randomly the static DNS servers or those provided by your ISP eventually.

On your OpenDNS dashboard you can define a whitelist if you wish to access to specific sites that would be blocked. I recommand to check 'Anonymizers' category in you filtering OpenDNS profile.

And above all your kids mustn't have Admin privileges on their computers..... so they can't install free VPN clients, or Tor etc... This basic is often forgotten....

WNR3500L running Toastman's Tomato.

August 2, 2011 8:41 AM

Tomato allows one to *restrict* access to certain URLs, and to control the time periods for access and non-access, and that works fine.

I don't see an equally-valuable setting - how does one stop all Internet access except for a specific URL or list of URL's?

Or do I have to do that in OpenDNS?

Thanks!

August 2, 2011 9:55 AM updated: August 2, 2011 3:46 PM

I found the answer here ...

EDIT:

Disregard ... I should have had my coffee first. This is not to restrict access TO specific URL's but to EXCLUDE them.

:-(

"block access to certain websites"

http://www.howtogeek.com/67943/5-tips-for-getting-the-most-out-of-your-tomato...

ARGHHHH!

So, I remain without a solution.

This would seem to be an obvious needed-feature in Tomato.

Any idea if it may be implemented soon - or may be in the latest version?

Discussion:    Add a Comment | Back to Top | Comments 1-5 of 5 | Latest Comment

Add Your Reply

(will not be displayed)

Email me when comments are added to this thread

 
 

Please log in or register to participate in this community!

Log In

Remember

Not a member? Sign up!

Did you forget your password?

You can also log in using OpenID.

close this window
close this window