NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
jelabarre59
Apr 25, 2021Star
Restoring LOCAL parental control functionality
So since Netgear is removing the "Live Parental Control" from their routers (which is good, I don't want to have to go to some other site just to change configuration), just WHEN are you going to res...
CrimpOn
Apr 27, 2021Guru - Experienced User
jelabarre59 wrote:
I see a couple that apparently require a cellphone app to manage the router, or at least to manage the parental controls. Being forced to use a phone/tablet is just unacceptable to me, and I'll automatically reject any such product.
This is so interesting. My mobile is always in my shirt pocket. Opening the Orbi app and sliding the "Pause" button would be a lot more convenient than logging into a computer interface, navigating to some screen, etc. "Different strokes for different folks".
jelabarre59 wrote:One particular issue I see with most Parental Controls is they are far too "static" in their configurations. I need to be able to dynamically shut off a connection, or to temporarily tweak a profile. And it seems a lot of these are relying on DNS to manage connections and filtering, but it would seem once a device has already run a DNS query, then it will have it in an ARP cache and won't hit DNS for a while (I know just enough networking to be dangerous :smileyfrustrated:). Technically what I'm in need of is more "access controls" than "parental controls", but they usually get lumped together.
Technically, it is the DNS cache, and Yes, entries stay in the local device cache until their "Time to Live" expires. I have seen articles about "How do Parental Controls work" discussing whether they are only DNS or have some other capabilities. Having no one to "Parent", I have not spent much time researching how controls work.
jelabarre59
Apr 27, 2021Star
CrimpOn wrote:This is so interesting. My mobile is always in my shirt pocket. Opening the Orbi app and sliding the "Pause" button would be a lot more convenient than logging into a computer interface, navigating to some screen, etc. "Different strokes for different folks".
Oh, I could certainly make occasional use of an app, but only in addition to a web or CLI interface. You need to be able to type information, and copy/paste as well. Anything more than minimal settings is awkward or even outright impossible on a phone screen.
- schumakuApr 29, 2021Guru - Experienced User
Well, these are home systems for consumers - where the majority of users just want flawless Internet. The last thing consumers want is a CLI, or the requirement to type much, ...
Of course, as an old IT infrastructure and network crow the blunt minimum would be a Web UI - as a nice to have.
Curious what you would intend to type, copy-paste, in the parental control context here...?
And in the same context I would like to hear how you would seriously reach the ability to "locally" control (technically!) the access just on a router in the data stream - considering kids are smarter than most parents - and without taking the end user device under strict security policy management.
- jelabarre59Apr 29, 2021Star
I would think a router should be able to start rejecting packets from some particular endpoint (MAC address of the device you want to cut off). That would effectively cut off an internet connection because the router would not handle the packets going out or coming in. I know the connections at a prior job could immediately drop connections for certain situations (misbehaving or misconfigured hardware usually).
It isn't like my daughter could use a cell phone as a work-around, because we don't have a cell signal at our house. Sure, she's clever when she wants, but generally she's too lazy to try. And I suppose if I put up enough roadblocks she'd start making an effort just to try working around them (a win in itself).
- schumakuApr 29, 2021Guru - Experienced User
When you think about that modern OS default to random MAC addresses ... blocking and manging MAC must be fun.
Other proposals?
PS. My sons are in the mid twenties now. They faced managed switches with port security some 20 years ago, and commercial grade firewall. So they had to be on a steep learning curve 8-)
PPS. It's a war you can't win.