Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[ledge]

Hi,

I've just recently begun to use "OpenDNS" to block undesirable websites for my family.
I believe D-Link's "Advanced DNS" feature uses similar technology to accomplish a similar thing (block requests at the DNS).
However, this is easily subverted by entering an IP Address into a URL to go to undesirable websites.  This bypasses the DNS lookup altogether and no DNS filtering is done.
Is it possible to add a feature to the router to block URLs using IP Addresses and only allow URLs using "names" (eg. allow http://www.dlink.com and not http://1.2.3.4)?

Such a feature would also be beneficial for the "Advanced DNS" feature in the DIR-655 router.

I believe such a feature already exists on the Billion ADSL routers, however, I do not have ADSL (only Cable Internet).

Cheers,
Ledge.

[Angelis83lt]

You can block specific IP addresses by using the website filter in the Advanced tab. just type the IP address in and that should do it.  Seems to work just fine here (I rarely type in the Domain Name, ussually always go with IP addresses for filtering.

now, your router can restrict access to websites, the problem being is restricting an IP address is not always useful. Since there are many places that have a range of IP addresses that you need to know.  There is only so much room in the configuration area for entry of these things in the router.  You could always set up a computer with BIND or Unbound and do all of your own blocking through that. Bind works on windows systems, while unbound works on linux.

[ledge]

Thanks for your reply, Angelis83lt.

I agree, blocking an IP Address is not always useful.  Blocking use of IP Addresses in this case is much better, especially when used with "Advanced DNS".

I also agree setting up a new computer in between our network of computers and the router would do the job, however, I don't have a spare computer (or budget, unfortunately) to do this, hence, the request to have it as a feature.

To any developers: is it possible to add this as a feature?

[Angelis83lt]

You could set it up with an existing computer and run a free VM of Linux. All of the software is free, and overall it should not degrade system performance to any degree. The only issue is setting it up.  But like I said. Your router is capable of blocking specific IP addresses that you assign.  Just go to a place like

http://domains.whois.com/domain.php?action=whois

type in the Domain name for the place and then read down for the active IP addresses. then go into "advanced"->"web filter"-> and select "Deny access" then type in the IP addresses.

You also will need to specify a schedule and set of computers that the webfilter will apply to.  If the router had more memory the ability to have multiple pages of slots to fill in would be great.


It is not perfect, but it appears that is what you are asking for.  Any software based application you install on only one system is going to be like the server setup I mentioned. after that you can get Software that will block access to sights on a specific computer that it is installed on.  Just look at china and thier green dam software.  does the same thing. Blocks IP addresses. Problem with that one may be cost though, and getting the computers in order to install it without a huge hissy fit (if you are doing it to kids computers).
Overall the server route is the best, just a little bit fustrating right at first for setup (until you get the hang of it).  System requirements of those things are so low you could probably by a $50 machine someone is getting rid of and set it up.  Minimum requirements for it are

# 300 MHz x86 processor
# 64 MB of system memory (RAM)
# At least 4 GB of disk space (for full installation and swap space)
# VGA graphics card capable of 640x480 resolution
# CD-ROM drive or network card

recommended are

# 700 MHz x86 processor
# 384 MB of system memory (RAM)
# 8 GB of disk space
# Graphics card capable of 1024x768 resolution
# Sound card
# A network or Internet connection


Very cheap machines now.  This is if you are going to use the Ubuntu Linux distro of course. Seems to be the one most popular these days.

[jason1722x]

http://www.parentalsoftware.org/parentalsoftware-reviews.html?gclid=CK6GjPmvh5wCFYZM5QodgyXD_g

Somethings are best left to the experts, the Dir 655 may limit your abilities to do certain things.

[ledge]

Thanks for your reply, Jason.
That type of thing is more than enough for what I'm looking for.
Due to the wide variety of machines at my place (eg. xbox, linux, etc.) I was hoping these things could all be done at the router securely.  The blocking of URLs containing IP addresses was just a start to that idea.