How can I restrict Internet access on the FRITZ!Box 7430

Restricting Internet access using parental controls

You can set up different access profiles in the FRITZ!Box and define the following for each of them in detail:

• how long and when Internet use is allowed on individual days of the week.
• which websites are blocked or which are the only ones that can be accessed.
• which network applications (for example online games) are blocked from accessing the Internet.

You can assign each access profile to one or more network devices in the FRITZ!Box home network. This way you can ensure that all devices used by a particular person, such as computers, smartphones, and game consoles, have the same limitations and are subject to the same budget.

Requirements / Restrictions

• The parental controls function is not available if the FRITZ!Box shares the Internet connection of another router ("IP client mode"). In this case, regulate Internet access in the other router.
• As a rule, devices in the guest network (private hotspot) are assigned to the "Guest" access profile and cannot be regulated on an individual basis.

Some of the settings described here are only displayed if the advanced view is enabled in the user interface. The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS.

 

Preparations

Creating filter lists

If you would like to prevent certain websites from being displayed (blacklist) or only want to allow users to access certain websites (whitelist), enter the addresses (URLs) in the respective filter list:

1. Click "Internet" in the FRITZ!Box user interface.
2. Click "Filters" in the "Internet" menu.
3. Click on the "Lists" tab.
4. Click on the "Edit" link next to the list you would like to edit.

   If you enabled the filter for websites for a specific access profile, as a rule direct IP access to websites is blocked for members of that profile. You can check the list of "Permitted IP addresses" to see which IP addresses the FRITZ!Box prevented from being called up and release them if you would like.

5. Enter the Internet addresses (URLs) or IP addresses in the field (no more than 500 entries per list). Press the space bar after entering each address.
   Example:
   poker.com xxx.com aggro.tv
6. Click "OK" to save the list.

Configuring network applications

If you would like to block certain network applications (such as online games) from accessing the Internet, you must first configure this in the FRITZ!Box:

You can only block network applications that exclusively use the TCP and UDP protocols.

 

Set up access and prioritization rules for network applications.

Setting up an access profile

General access profiles are preconfigured in the FRITZ!Box. All devices in the home network that have not been assigned to a specific profile are automatically assigned to the "Standard" access profile. The access profile "Guest" applies to all devices in the guest network.

If you would like to regulate Internet access for particular users or user groups on an individual basis, set up a separate access profile for each of them:

1. Click "Internet" in the FRITZ!Box user interface.
2. Click "Filters" in the "Internet" menu.
3. Click on the "Access Profiles" tab and then the "New access profile" button.
4. In the "Name" field, enter the name of the user or user group you would like to regulate Internet access for.
5. Define when Internet use should be allowed in the "Period" window.
6. Define how long members of this profile are allowed to use the Internet on each day of the week in the "Time Budget" window.

   Tickets can be used to extend online time by 45 minutes per ticket. Tickets are displayed under "Internet > Filters > Access Profiles" in the user interface. A ticket is redeemed in the browser on the page notifying users that their online time has been exhausted.

7. If you set up a time budget and all of the devices belonging to this access profile should share the available time, enable the option "shared budget".

   It only makes sense to use shared budgets for access profiles of individual users who use more than one network device to access the Internet. This option should not be enabled for user groups.

8. Enable the option "Use of guest access blocked".
9. If you want to block individual websites or only want to permit access to certain websites, enable the option "Filter web sites" and configure the desired settings.
10. If you want to block particular network applications from accessing the Internet, select the applications from the drop-down list "Block network application".
11. Click "OK" to save the access profile.

Assigning an access profile

You can assign access profiles to all devices that were connected to the FRITZ!Box home network at least once:

1. Click "Internet" in the FRITZ!Box user interface.
2. Click "Filters" in the "Internet" menu.
3. Select the desired access profile for the device from the drop-down list.
   Example:
   You created the access profile "John" for your son. John uses the FRITZ!Box's Internet connection with his smartphone, his game console, and his computer. To ensure that John's budget includes Internet access from all of these, assign all three of the devices to the access profile "John".
4. Click "Apply" to save the settings.

This concludes the configuration of the parental controls.

You can always call up http://fritz.box/surf.lua on a device to view all of the restrictions that are valid for that particular device.

Implementing additional security measures

Adjusting the "Standard" access profile

Deny Internet access to members of the "standard" access profile to ensure that parental controls cannot be bypassed:

All devices in the FRITZ!Box home network that have not been assigned to a specific profile are automatically assigned to the "Standard" access profile.

1. Click "Internet" in the FRITZ!Box user interface.
2. Click "Filters" in the "Internet" menu.
3. Click on the "Access Profiles" tab and then the (edit) button for the "Standard" profile.
4. Enable the option "never" in the "Time Limit" section.
5. Enable the option "Use of guest access blocked".
6. Click "OK" to save the access profile.

Setting up password protection for FRITZ!Box

The FRITZ!Box is already password protected in the factory settings. If you disabled the FRITZ!Box's password protection, enable it again:

1. Click "System" in the FRITZ!Box user interface.
2. Click "FRITZ!Box Users" in the "System" menu.
3. Click on the "Login to the Home Network" tab.
4. If each user should use a unique password to access the FRITZ!Box, enable the option "Login with FRITZ!Box user name and password".
5. If all users should use a shared password to access the FRITZ!Box, enable the option "Login with the FRITZ!Box password" and enter a password of your choice that will be required to access the FRITZ!Box user interface.
6. Click "Apply" to save the settings.