Help - Parental controls - block Wi Fi

k9handler · 01-13-2008, 08:13 AM

Leave it to me as the good parent, I have established parental controls on my kids computers and blocked sites that are not trusted. Now is where it gets tricky.

I can limit internet time with my router, but someone in my neighbrhood has an unsecure router that has great signal in my house. I have looked at ways of preventing the kids PC's from connecting to other networks/routers but just can't seem to find a good solution.

Any ides?

My goal is to have ONLY my router as the ONE the PC's can connect to.

Neilk · 01-13-2008, 08:18 AM

Time to find the neighbors. See if you can "hack" into their router or PC to find out who they are. If their router uses PPOE to access the internet, it should be easy to find out who it is. You can then help them secure their network.

k9handler · 01-13-2008, 08:33 AM

that's a good idea, if they have remote admin enabled then I guess I could possibly gain access to the router.

k9handler · 01-13-2008, 08:38 AM

ok I connected to the router and all I am able to do is see what type it is...Linksys WRT546 and through it's IP I get nothing, so I think remote admin is disabled.
How can I get an ID with PPOE?

Neilk · 01-13-2008, 09:12 AM

Well, I on my Linksys router that connects us to ATT, I need to connect via PPOE which requires my e-mail address. That's on the main Setup screen.

If they use DHCP, then you won't see an e-mail address. Then look for a Status tab, go to Local Network and then click on DHCP table. See if any of the PCs listed there have an identifying name, like BillyBob's PC. I am assuming their UI is the same. You can also see any IP addresses connected to their router. Try to log in one of those PCs. Not exactly appropriate, but in the end you would be helping them out in securing their router.

Neilk · 01-13-2008, 09:17 AM

If you are connected to the router, go to 192.168.1.1 to log in. Default password for Linksys routers is admin... so type admin for both the user and the password. Can you get in?

k9handler · 01-13-2008, 10:30 AM

Quote:

Originally Posted by Neilk

If you are connected to the router, go to 192.168.1.1 to log in. Default password for Linksys routers is admin... so type admin for both the user and the password. Can you get in?

that was what I attempted before, without remote turned on I would need to be on a ethernet cable to do this.

As for network PC's...only the router is visible.

KaptKaos · 01-13-2008, 10:32 AM

How old are the kids and how likely are they to try and connect to the other router?

k9handler · 01-13-2008, 10:36 AM

This is what I can get from the router.

Connection-specific DNS Suffix: hosts.bc1.bresnan.net
Description: Atheros AR5005G Wireless Network Adapter
Physical Address: 00-19-7D-63-E6-56
DHCP Enabled: Yes
IPv4 IP Address: 192.168.1.101
IPv4 Subnet Mask: 255.255.255.0
Lease Obtained: Saturday, January 12, 2008 4:44:17 PM
Lease Expires: Monday, January 14, 2008 10:35:54 AM
IPv4 Default Gateway: 192.168.1.1
IPv4 DHCP Server: 192.168.1.1
IPv4 DNS Servers: 69.145.248.50, 69.145.232.4, 69.145.248.4
IPv4 WINS Server:
NetBIOS over Tcpip Enabled: Yes
Link-local IPv6 Address: fe80::83d:6338:c79d:d8bd%9
IPv6 Default Gateway:
IPv6 DNS Server:

k9handler · 01-13-2008, 10:39 AM

Quote:

Originally Posted by KaptKaos

How old are the kids and how likely are they to try and connect to the other router?

three of them are in High School and very likely to connect to it, they get a kick out of it walking around the neighborhood with PSP's doing exactly that.

I trust them to do the right thing, yet when I want to put down the hammer and take the privlege away I need to know that my router is the only one they can connect through.

These are all Vista machines...is there a way to prevent new connections?

Paul_Heery · Paul_Heery's Garage

You need to talk to your kids. There is nothing you can do if you believe that your children will do whatever they can to sidestep your efforts for controlling their access. If you locked down my Vista machine, I would simply boot from a LiveCD Linux distro and surf the net for whatever porn I could find.

Now, you need to realize that it is not illegal for one of your neighbors to operate an open (unsecured) access point. However, it is illegal for you to try to connect to their router and attempt to gain information about them. (PPOE, email address, etc.)

If you are really worried about you neighbors open AP, install NetStumbler on your laptop and talk a walk around your neighborhood. Based upon signal strength, you will easily be able to tell where the open APs are located. Then, you can politely approach your neighbors and have a conversation about helping them secure their network.

87coupe · 87coupe's Garage

You can use Group Policies to prevent them from connecting to other networks.

peppy · 01-13-2008, 11:10 AM

[QUOTE=Paul_Heery;3701812]You need to talk to your kids. There is nothing you can do if you believe that your children will do whatever they can to sidestep your efforts for controlling their access. If you locked down my Vista machine, I would simply boot from a LiveCD Linux distro and surf the net for whatever porn I could find.

+1
Were there is a will there is a way.

You can never outsmart the hormones of a teenager.

k9handler · 01-13-2008, 11:15 AM

ha ha I agree the teenagers will win every time. I have had a good talk with them so time will tell. As for a boot CD, I set their PC's up so it does not boot from CD and password protected the BIOS.

stomachmonkey · 01-13-2008, 01:42 PM

Quote:

Originally Posted by k9handler

that was what I attempted before, without remote turned on I would need to be on a ethernet cable to do this.

As for network PC's...only the router is visible.

Are you still on your network or theirs?

As in did you disconnect from yours and specifically connect to theirs?

Seems odd that the network would be both open and have remote turned off.

Anywho, If you can manage to get into their admin just block the the MAC address (Media Access Address, nothing to do with Apple) of your kids computers from being allowed to join. Look for MAC Filtering.

KaptKaos · 01-13-2008, 02:13 PM

Quote:

Originally Posted by 87coupe

You can use Group Policies to prevent them from connecting to other networks.

You can lock down their rights to the local PC so that they can even get into the control panel or run the associated applications. That would be easiest I think.

The very first rule for family Internet usage is that computers should only be used in common areas with monitors facing into that common area. Laptops obviously make that much more difficult.

As for the Linux Boot CD, I'd put that in the category of l33t sp34|(. If they are using elite speak and linux, you've already lost the battle.

k9handler · 01-13-2008, 02:23 PM

Quote:

Originally Posted by stomachmonkey

Are you still on your network or theirs?

As in did you disconnect from yours and specifically connect to theirs?

Seems odd that the network would be both open and have remote turned off.

Anywho, If you can manage to get into their admin just block the the MAC address (Media Access Address, nothing to do with Apple) of your kids computers from being allowed to join. Look for MAC Filtering.

That is how I have them controlled on my router, Mac filter only allows them on a small portion of the day...that's when the neighbors router becomes an issue since their PC's conect to it. I did go in and delete it's settings from the managed networks but I am sure once my router is unavailable the PC's will search it out and connect.

stomachmonkey · 01-13-2008, 02:36 PM

Set your kids boxes to use Static IP's, assign the statics on your router then lock CP access.

If you can keep them locked to static then they can't pick up a Dynamic address from another router.

k9handler · 01-13-2008, 03:24 PM

Quote:

Originally Posted by stomachmonkey

Set your kids boxes to use Static IP's, assign the statics on your router then lock CP access.

If you can keep them locked to static then they can't pick up a Dynamic address from another router.

great idea...seems simple enough and just might work!

jeffgrant · 01-13-2008, 03:42 PM

Only if you pick a "non-standard" IP range for your network and your router.

Pick something like 192.168.111 as your range (if you can) and change your router to something other than the default .1

Otherwise, if the other network has the same defaults as you do, odds are pretty good that your static IP will also work for them there as well.