Parental control, need help!

[oyvindk]

I've just bought the WL-500G, and while it has quite a few useful features built-in, it seems to lack some functions that I need.

I am going to allow my teenager to have his own computer connected to the internet, but I want to have some control of his activities, and I want to have the router schedule which time of day his computer is allowed to connect to the internet, for instance I want the router to drop his connection at bedtime. I also will not allow him to use any P2P-networks.

In addition to this I would like to be able to monitor/filter the traffic to and from his computer.

I realize that all of this is probably possible with the WL-500G, but I have limited experience with Linux, and I know next to nothing about scripting. I've read about iptraf, but it does look a bit complicated.

If I have to buy a USB-stick I'll do so. How large does it have to be?

I've seached the forums, and I have found pieces of information many places, but it is difficult for a newbie to get going and to put all the necessary pieces together.

Tips and links appreciated!

Regards
-Øyvind

[oyvindk]

I can't imagine that I'm the only one that needs information about how to do this. As I wrote in the original post, I have found bits and pieces, but I am unable to put this information together.

Please help a newbie... :o

To illustrate, I don't even know what the busybox is, and what it's used for...

[gwl]

I guess you can do all that with official Asus firmwares.
Just use the web interface.

I think the custom firmwares don't provide url blocking.

[majx]

If you want to lock him out(i.e. p2p) ...take Oleg's FW and play with iptables...
but you won't really be able to lock XXX sites.

Your kid's will be for shure able to bypass your rules after a while, exept, you get really good in doing your job.

[oyvindk]

Is there a guide somewhere to using iptables?
Do I need this "busybox" (that I don't know what is), or do I just telnet to the router?
I am running Oleg's latest firm, so thst's no problem.

[Antiloop]

Is there a guide somewhere to using iptables?
Do I need this "busybox" (that I don't know what is), or do I just telnet to the router?
I am running Oleg's latest firm, so thst's no problem.
see http://www.google.com for iptables guide

[majx]

Depending on your host-OS I would recommend to take a look at www.fwbuilder.org and www.iptables.org (http://www.iptables.org)

But it seems busybox has problems using some options (-E).
I will make a bug report for that.
But there are enough other Sites working on that theme..

:)

[oyvindk]

Ok, thanks.
I'll read up a bit on iptables, then..

One additional question, though:

How would I let one specific computer have access to the internet, but not to any of the other computers on the lan? Would I create an entry with the iptables that only allows packets going to the gateway address (which is the Asus router itself) ?

[majx]

In this case make the following (ok, don't remember the correct syntax:p)

Allow access to the router from a defined IP AND MAC-Address
(Your "Management Console" = will be your own PC)

-> allow dns, dhcp, (ntp) to the router(and out on the internal interface -> br0)

drop or reject the rest connecting DIRECTLY to the router...but take care to test your config before apllying it to flashfs!