Forum Discussion

Moist_Morsel's avatar
Moist_Morsel
Joining in
5 months ago

IP amd Port Filtering not working on home hub 3.

Hi there.

My daughter keeps getting up at 5.30 to watch youtube and I want it to stop.

I tried the virgin media connect app but it didn't work, presumably because I have split the WiFi ranges to two separate access points (5 and 2.4ghz).  Therefore I tried doing this through the router using the IP and Port filtering section within advanced controls and security.

I highlighted between 1pm and 7am on the router and selected all destination IP addresses, selected all, selected block all on specific dates and times.

The router should, for all intents and purposes, be blocking Internet traffic between these hours BUT I woke up this morning to find out my daughter had been online since 5am.  I'm really irritated with this since I keep forgetting to brick the router manually before bed 

 

As a summary, I have port triggering set up for my xbox, I still have the 2.4 and the 5ghz bands split into their separate access points, and I have named some devices so that I can identify them. Otherwise though, the settings are default.

Can anyone advise what I am doing wrong

IP Filtering
Networking
not working
parental control
Port Filtering
  • Sephiroth's avatar
    Sephiroth
    5 months ago

    You should be able to define your daughter’s device MAC address to the restriction rule.  Or have you done this already?

  • Client62's avatar
    Client62
    Alessandro Volta
    5 months ago

    Very soon you will be the one asking for the Wi-Fi password & for the office laptop to be re-enabled !

    10+ years ago VM ( or any ISPs ) parental controls might have been effective against an IT novice.

    Current mobiles and laptops have easy to use ways to evade
    both VM's DNS content blocks and MAC address filtering.

    In many cases these are enabled by default and will seamlessly reconnect leaving you chasing
    your tail as the device changes identity before your eyes and enjoys unimpeded access.

    May one gently suggest for parents and children to sleep better,
    laptops and mobiles remain out of bedrooms after lights out.

  • jpeg1's avatar
    jpeg1
    Alessandro Volta
    5 months ago

    Unfortunately there are no guaranteed technical alternatives to parenting. 

  • Sephiroth's avatar
    Sephiroth
    Alessandro Volta
    5 months ago

    You should be able to define your daughter’s device MAC address to the restriction rule.  Or have you done this already?

  • Client62's avatar
    Client62
    Alessandro Volta
    5 months ago

    I suspect that is what has been done, only to be side stepped by MAC Address Randomisation.

  • 用心棒's avatar
    用心棒
    Very Insightful Person
    5 months ago

    Moist_Morsel,

    The suggestion of not having device in bedroom is the best solution along with education of online harms and benefits.

    FWIW
    The setup shown in posted image will never work because no device will be assigned an IP Address of 192.168.0.0.

    One possible strategy to consider to achieve your goal would be to reserve an IP Addresses range for devices where internet access is to never be blocked and any devices with IP Addresses outside of that range will be blocked using the schedule specified. The steps required would be:

    • for all devices to reserve IP Address check that MAC Address randomisation is disabled and then connect to home network
    • under DHCP reserve IP Address for those device not to be affected by internet block and assign them the lowest possible IP Addresses, i.e. 192.168.0.2, 192.168.0.3, etc. Restart these devices and confirm IP Address assignments.
    • under Security > IP and Port filtering create a new rule using a starting IP Address one greater than those reserved in previous step, i.e. if highest reserved was 192.168.0.10 then range would start from 192.168.0.11. For example:
    • remaining configuration should look similar to following:

    Be aware, a highly motivated mind will find a way around the internet block — might be technically skilled  (i.e. clone MAC Address of DHCP reserved device not currently connected to network) or brutally blunt as pinhole resetting Hub.