Son found method to bypass Blocking
Hello,
It didn't take long for my 15 year old to find a way around Firewalla. I'm not sure how he is doing it, but at least Firewalla alerts me when he does. So Firewall sees the same device name that is blocked but allows his phone online anyway. I can block it again, but if he's persistent he can be back online in a few minutes.
Also, and not 100% sure if it's related, but when he does this my router will hang up and requires a reboot to recover.
I guess I can try and block the sites he's trying to access, mostly Youtube, Google Videos, Instragram, and Online Games.
If anyone has some suggestions on how to figure out how he's getting past Firewalla please send them my way!
My Router is a Netgear 7000P running dd-wrt firmware, which was my first attempt at parental controls before buying Firewalla.
-
Kids are the "best" hackers :)
Did he change the MAC address? When you receive the alarm, check and see what's the MAC address he changes to.
We are likely to build lockdown mode, which requires new devices to be approved when attaching to the network. This may help in this case. Well ... until he discovers VPN ... and we have a VPN detector coming as well ...
-
Lol, yes that is what he's been doing with his iPhone for a while, he doesn't have an active cell plan and has to use Wifi. Thanks for confirming the Hostname isn't currently being used for blocking. Regarding VPN, looks like he's already discovered NordVPN and has it installed on his PC. Will Firewalla alert me to him making a connection from his PC? He doesn't have a way to pay for the service, so it may just be a free trial.
Glad to hear your working on some additional useful/helpful features. Keep up the good work and Thanks!
-
Did you know that a google classroom account can bypass the Desktop system client DNS settings? It's really annoying. Fortunately, all you need to do to get around this is to disable the ability to run google-chrome browser on the clident. Either you could de-install it and make sure that the user can't re-install it or setup some sort of internal monitoring to detect the process and kill it (I use Sensu). If you don't have a child with a google classroom account, then this won't be a problem.
Please sign in to leave a comment.
Comments
5 comments