Blocking YouTube only not other Google Services

Comments

17 comments

  • Avatar
    Renato

    Same problem here. Did you find a solution?

    0
    Comment actions Permalink
  • Avatar
    Mark Harbord

    I'm having this too - blocked *.youtube.com seems to block a lot, if not all Google sites - including www.google.com search engine.

    Is there a better filter? Using this as Firewalla isn't blocking youtube on my sons android phone, despite the video block being on.

     

    Any help gratefully received!

    Mark

     

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Did you use the block video function under device view?  If you used that and it is still not working, see if you have ipv6 running, if you do, tap on + then ipv6

    0
    Comment actions Permalink
  • Avatar
    Sean Tan

    I am having the same problem with Firewalla Blue.

    I select the laptop device, go to Blocking Rules > create a new rule.

    Set a target as domain > youtube.com and saved.

    I try to access Youtube.com with the laptop and youtube.com page is showing error. But it also affected Google Hangout and other Google services.

    I don't understand what do you mean by device view and tap on + then ipv6.

    Please help.

     

    Thanks,

    Sean

     

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Sean

    Firewalla blocks services using both DNS and also IP address.  In your case, it is highly likely that youtube.com was sharing the same IP address (range) as the rest of the google services.   

    I remember, one way to block youtube is using *.googlevideo.com instead of youtube.com. 

    We may implement a simpler DNS only block in the future, those blocks are pretty easy for kids to bypass. 

     

    0
    Comment actions Permalink
  • Avatar
    Steve McGee

    I am using the Block App -> Youtube rule and it's blocking google classroom, google drive, etc...

    IP Address blocking is not the appropriate way to do this, as many of these services share the same public address space and use NLBs to direct requests to the appropriate internal resources...

    I want to restrict my child from watching youtube videos during the day, but she still needs access to her virtual classroom that uses other google services!  I'm on Firewalla Gold and a little frustrated at this.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    Hi Steve

    I think our engineering is trying to work out a better way to block youtube.  

    The reason for IP block + DNS block together is to make sure the block is harder to bypass.  We have seen smart kids just add a DNS entry locally and were able to bypass DNS-only blocks.  

    It is only recently we start seen google mixing significantly the different servers riding on the same IP, which we are trying to fix now.  It will likely be a combination of DNS + IP blocks. 

    0
    Comment actions Permalink
  • Avatar
    Steve McGee

    You could use SSL Certificate (SNI/Host) evaluation to effectively block these services where determined children have bypassed DNS.

     

    0
    Comment actions Permalink
  • Avatar
    Support Team

    @Steve, yes, we are working on SNI blocking.

     

    For youtube blocking rule, we have just made an update to the rule, can you try to remove the current youtube rule and add again?

    0
    Comment actions Permalink
  • Avatar
    Steve McGee

    I did find that there's an option kinda buried in the Block Mode settings that will allow you to block DNS only, which is a good way to approach youtube.com and not block all the IPs also used for legitimate web services and apps also owned by Google. 

    In your Rule creation, select Domain as your target, enter youtube.com, and set your Block Mode to Domain Only.  

    I'm testing this now, and anticipate it to work until my child is a little older and computer savvy.  Hopefully by then all this virtual classroom junk is behind us...

    cheers

    0
    Comment actions Permalink
  • Avatar
    Steve McGee

    You may need to put in *.youtube.com in your domain name... I'm unsure..

     

     

    1
    Comment actions Permalink
  • Avatar
    Karen D

    Did the update work? I need to block Youtube but not google docs and classroom and before I buy a firewalla really need to know the answer! Thanks!

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    We changed youtube block to be more DNS block than IP layer block, try it out.  You need to delete the current rule and add it back again.

    0
    Comment actions Permalink
  • Avatar
    Arlo Miller

    Why is youtube so stinking hard to block?  So far I haven't been able to block it at all using firewalla.  I've tried implementing it as an application block and as a domain block.  Neither work at all.  The kids can still watch all the youtube they want.

    Using screen time on iOS I can block it on their ipads by blocking the website youtube.com, but i'm not having success on computers.

    I'm going to try blocking youtube on my pi-hole and see if that works.

    Sounds like it has been a problem for many others though too?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @Arlo

    Check if their browser has DoH enabled, when it has that the domain blocks will not work.  (domain = DNS block). you will have to turn on the default block, the side-effect of that is it may block other google services. 

    0
    Comment actions Permalink
  • Avatar
    Freddie Cash

    Now that Google Play Music has been replaced with YouTube Music, it gets even more fun.

    Application block for YouTube breaks YouTube Music.

    Application block for YouTube with a separate "allow music.youtube.com" blocks everything.

    Had to switch to using a domain-only block for YouTube.com with a separate allow music.youtube.com.

    That way, they can listen to music, but not go down the video rabbit hole. Hopefully, it doesn't break anything else. :)

    0
    Comment actions Permalink
  • Avatar
    Freddie Cash

    Hrm, nope, seems that blocking googlevideo.com also blocks music streaming in Youtube Music app.  :(

    0
    Comment actions Permalink

Please sign in to leave a comment.