Restricting internet access to one website?

Hi Everyone,

I have a strange problem. My DD, 14 years old, is to access a website on my laptop. http://mathshub.help/for-individuals/. I have to say key stage 3 can be accessed for free. However my DD will be on all sorts of websites. So I would like to restrict her access to the one website.

I have thought about 2 ways to do this. I could capture the videos from the screen and then copy them to a flash drive and she can use them on her laptop, which doesn’t have internet access.

The other way is to set her up on my laptop and restrict all programs and only allow access to one website.

I have set up another user, but I have no idea how to restrict the internet to one website.

I have also tried to download a program to capture the videos, kazam. However I can’t get it to work. I get the following message.https://www.flickr.com/photos/39355512@N00/22961605169/in/dateposted-public/ (I don’t seem able to insert screenshot) https://www.flickr.com/photos/39355512@N00/22961605169/in/dateposted-public/

I have OpenSuse 13.1. Hopefully someone can make a suggestion of the best way to go, with the relevant steps.

Thank you in advance.

Nappy501

Is she technically sophisticated?
If she doesn’t know about IP addresses and only knows how to type in domain name,
You could disable/remove all DNS servers and configure the one website’s address in your Hosts file.

I suppose it should also be able to configure a SUSE FW rule to allow access to the one domain name and IP address, but that’d be more work.

TSU

Hi TSU,

I am not sure if she is technically sophisticated. Children always seem to think outside of the box to me. Just to show my own lack of sophistication. How do I disable/remove DNS servers for just the one user? And then configure the website address? If you could point me towards a tutorial that would be good. Thank you.

Is your DD using laptop’s inbuilt laptop to ISP direct wireless network connection, or connecting through your home network router ?

Many SOHO networks able to set restrictions using router’s rule settings for Parental Controls or Time of Day.

Important to set router access code to one they do NOT know, then rkeep an eye on it to check they have not just reset it.

Hi,

All wireless access is through a Netgear router. All connections are allowed by mac address. However, her laptop is running windozes, so I have set up a user on my laptop for her to use to do her maths.

I don’t know if she knows how to access the router, but she doesn’t and cannot guess (I believe) my root password. I do need a tutorial to look at to set it up.

Regards

Nappy501

My question is off topic, but what does DD mean? Just curious.

Dear Daughter :slight_smile:

It all depends on your router’s methods.

In my “Parental Controls” enabled certain sites so still available when “Time Of Day” blockage is ON

examples are like the wider web address for local Education sites (nsw.edu.au), studyladder, time, security and system update sites:

0.opensuse.pool.ntp.org
clamav.net
gwdg.de
opensuse.org
nsw.edu.au
studyladder.com.au

BTW include ongoing access to your router (eg http://10.0.0.138) so you can turn it OFF then ON again, as it may need be added to your list of allowed available sites.

Check then “Time of day access control” either BLOCKS or does NOT BLOCK those needed to achieve purpose.

When “Time of Day” blockage leaves only the desirable sites available the “Time of Day” can be turned On/Off as needed - perhaps be automated for set times.

I don’t think my router has ‘parental controls’
Imgur
Imgur

Or am I missing the point?

The way the Internet works is that every machine on the Internet has a number address.
Because numbers are so hard for humans to remember and communicate, a system of names was built to overlay and translate those number addresses to named addresses you hear on a regular basis.

So, as an example
If someone said “you have to type the following in your web browser to look for stuff”

http://74.125.227.178

That number would be hard to remember, particularly if you had to remember a different number for every place on the Internet.
But, if someone said you can type

www.google.com

That would be a lot easier for a numan being to remember, and for many typical non-technical Users they think that"www.google.com" is the only way to visit that website and have no idea about the underlying numbered address.

So, I’m saying that although the numerical address can always be entered, if your DD is one of those who has no idea about those number addresses, it’s easy to disable the method of names and configure only the one permitted web address. Of course although this is easy to do, it leaves an enormously easy way to circumvent (go make a list of addresses elsewhere like a friend’s house or school and bring that list home).

To do what I described,
Disable the Name Resolution System
From your installed Desktop, open your menu
Go to YAST
Click on “Network Settings” or “Network Devices” (either one depending on your version of openSUSE)
Click on the “Hostname/DNS” tab
Click on the "Modify DNS Configuration box and select “Use Custom Policy”
Click on the box just to the right “Custom Policy Rule” and select “STATIC”
Click in the Name Server 1 field and type “127.0.0.1”
Click “OK”

Enable your Website
In YAST, click on the “Hostnames” applet
Click on the “Add” button.
Enter the IP address and the Name
Click OK to accept your new entry.
Click OK again to close the Hostnames applet.

Remember also that the above solution does not block anything, only hides easy access.
So, if the website you allow has links that go elsewhere, then your DD will be able to go wherever those links go.

If you want a “better” solution than what I described above,
The software you’re asking about is commonly called “Nanny” software.
Depending on how they work, installation can range from easy to difficult but usually (only usually!) result in software that’s relatively easy to use. There are other applications which fall in the same category and have similar functionality but without “nanny” in the name are usually more difficult to use.

So, I recommend you do an Internet search using “nanny software linux” as keywords.

HTH,
TSU

Guess may need use: Block Sites and Schedule

Which Netgear model and which firmware versions for your Netgear router ?

Thank you TSU for your very clear explanation. Now I understand. Bless you, it is not going to work. Unfortunately, I have checked the website: http://mathshub.help/for-individuals/#/main-239 at the bottom it has various links. The ones that are going to be a problem/distraction are youtube and facebook. I presume you just click on the link and it takes you to the site.

I will have a look at nanny software tomorrow.

My other idea was to capture the videos and download them onto a stick for her to watch on her laptop, but I got stuck there also. Maybe I should go and post that query in another forum.

I found this: https://forums.opensuse.org/showthread.php/482917-How-to-restrict-and-enforce-usage-for-individual-user whilst hunting around. I am hoping DD grows into her social skills.

It is a Netgear DG834 v3. :shame: I don’t think I have every upgraded it. (Now going to hide in embarrassment).

Read this part of the manual :wink:

         http://documentation.netgear.com/dg834g/enu/202-10155-01/DG834Gv3_RM01-05-19.html

Select Complete PDF manual at top Left of web page, to download the entire manual, or use

this link http://documentation.netgear.com/dg834g/enu/202-10155-01/pdfs/FullManual.pdf

Thank you very much. I am off to do some reading. Hopefully, I can work it out.

Thank you all for you assistance. I have decided to give up on this avenue. The main reason is I can use the router to block internet access to various websites, but you cannot choose just one website to access. Also from what I can see it would block all internet access. I can allow my laptop to be the trusted user, so it is not blocked. However, we have a NOW TV box and my tablet and phone also use the wifi connection, so I don’t see how it is going to work.

Thank you again.

It may take a while to sort out your rules with the DG843 router FullManual.pdf

Need work way through from page 49 :

Outbound Rules (Service Blocking)
The DG834G v3 allows you to block the use of certain Internet services by computers on your
network. This is called service blocking or port filtering. You can define an outbound rule to block
Internet access from a local computer based on:
• IP address of the local computer (source address)
• IP address of the Internet site being contacted (destination address)
• Time of day
• Type of service being requested (service port number)

Create your rules in order of importance, with IMHO top rule being to enable your computer to access the router, so can easily fix any mistakes.

Then enable always internet access to essential sites - like opensuse.org (in my “Parental Controls”) so important sites always available when less important “Time Of Day” blockage is ON

Include in this list sites you want your DD user to access.

With your other devices, if the router lists them they are identified, see page: 71 “Viewing Attached Devices” : " The Attached Devices menu contains a table of all IP devices that the modem router has
discovered on the local network.
"

Seems can make some rules for these devices as to DG834G they just another device trying to access internet.

Search Netgear’s forums for posts concerning your DG834G to see what others resolved there.