Posted: Fri Jan 06, 2017 4:32 Post subject: How to enforce Google, Bing and YouTube Safe Search
In order to force anyone on the network to use Google SafeSearch, Bing Family Filter, and Restricted (moderate) YouTube:
1. Add the attached host file to the JFFS directory.
2. Add addn-hosts=/jffs/host_safesearch.txt to Additional DNSMasq Options in Services tab.
3. Restart DNS. Go to Administration>Commands and run restart_dns or reboot the router.
Posted: Sat Jan 14, 2017 9:45 Post subject: Re: How to enforce Google, Bing and YouTube Safe Search
miggalvez wrote:
In order to force anyone on the network to use Google SafeSearch, Bing Family Filter, and Restricted (moderate) YouTube:
1. Add the attached host file to the JFFS directory.
2. Add addn-hosts=/jffs/host_safesearch.txt to Additional DNSMasq Options in Services tab.
3. Restart DNS. Go to Administration>Commands and run restart_dns or reboot the router.
It worked brilliantly, thanks a billion.I tested using https as well, it forces safesearch. the information you shared helps lot of people. thanks again.
Joined: 08 Mar 2011 Posts: 22 Location: Saskatchewan, Canada
Posted: Fri Feb 24, 2017 5:13 Post subject: Re: How to enforce Google, Bing and YouTube Safe Search
If you don't have JFFS available on the build of DD-WRT you are running, you can do the following 3 things for a pretty robust content filtering setup:
First, go to:
Setup > Basic Setup > Network Address Server Settings (DHCP) and set
Quote:
Static DNS 1 to 208.67.222.123
Static DNS 2 to 208.67.220.123
then 'Save' and 'Apply Settings' to use the OpenDNS FamilyShield nameservers.
then 'Save' and 'Apply Settings' to force the OpenDNS FamilyShield nameservers to be used first and to force SafeSearch on for Google and Bing, and Restricted Mode on for YouTube (you can add your local Google URLs, or all of them if you wish).
Third, go to:
Administration > Commands > Command Shell and add (or 'Edit' and add)
Code:
iptables -t nat -A PREROUTING -i br0 -p udp --dport 53 -j DNAT --to $(nvram get lan_ipaddr)
iptables -t nat -A PREROUTING -i br0 -p tcp --dport 53 -j DNAT --to $(nvram get lan_ipaddr)
then 'Save Firewall' to prevent the use of alternative DNS nameservers.
Thanks for posting this wavracer. I was looking for this solution and it works perfectly.
In my case, I was already using Open DNS and blocking any attempt to bypass the router plus I was running an ad blocking script. I just incorporated those addresses into the adblocking startup script and now the unwanted images are blocked as well. _________________ Asus RT-AC66U_B1
Posted: Tue Dec 18, 2018 16:05 Post subject: Re: How to enforce Google, Bing and YouTube Safe Search
wavracer wrote:
If you don't have JFFS available on the build of DD-WRT you are running, you can do the following 3 things for a pretty robust content filtering setup:
First, go to:
Setup > Basic Setup > Network Address Server Settings (DHCP) and set
Quote:
Static DNS 1 to 208.67.222.123
Static DNS 2 to 208.67.220.123
then 'Save' and 'Apply Settings' to use the OpenDNS FamilyShield nameservers.
then 'Save' and 'Apply Settings' to force the OpenDNS FamilyShield nameservers to be used first and to force SafeSearch on for Google and Bing, and Restricted Mode on for YouTube (you can add your local Google URLs, or all of them if you wish).
Third, go to:
Administration > Commands > Command Shell and add (or 'Edit' and add)
Code:
iptables -t nat -A PREROUTING -i br0 -p udp --dport 53 -j DNAT --to $(nvram get lan_ipaddr)
iptables -t nat -A PREROUTING -i br0 -p tcp --dport 53 -j DNAT --to $(nvram get lan_ipaddr)
then 'Save Firewall' to prevent the use of alternative DNS nameservers.
[quote="NorthantsPete"]Can we have this but for Twitter.
Ive found despite efforts, the kids just fire up Twitter app and away they go onto the porn tweets
I blocked the dns entires for media, however it blocks everything
I hear twittyer hasd a safe search but you have to turn it on[/quote]
You can use cleanbrowsing or OpenDNS as your DNS server in DD-WRT to block Twitter altogether. You might also want to check out a service like CovenantEyes for your families devices.
