Kids winning the battle on Youtube

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
bumbo73
DD-WRT Novice


Joined: 16 Aug 2021
Posts: 1

PostPosted: Mon Aug 16, 2021 18:07    Post subject: Kids winning the battle on Youtube Reply with quote
Hardware Details:
Router: Asus RT-AC66U
Installed Asus RT-AC68U C1
DD-WRT Firmware: v3.0-r42617 (03/05/20)
Optik TV STB: Telus (Canada) ISP

So the time as come to put the foot down on the Youtube App inside the Optik TV STB. I was able to block the YouTube channel with PIN so victory there. From what I can tell there is no way to uninstall the YouTube app on the Optik STB operating system. I have called tech support and they said they can't uninstall or block the service. It's cooked into the operating system.

I have got a secondary router acting as a wireless access point (ASUS AC66U) that is connected (wired) to my Optik STB. The AC66U router is wired connected to main router. The WAN and DHCP is disabled on this router as well. I have flashed dd-wrt firmware (v3.0-r42617) on the router to replace ASUS firmware. I have turned off the wireless (2.4g/5g) on the router as I just want to block all Youtube content via LAN port. I have the MAC address and IP of the Optik STB. From investigating on google, it seems the magic happens on a menu called "Access Restrictions" within dd-wrt. I entered the MAC address/IP address that I want to block/filter within a section called Access Policy. In addition, I put everyday and 24 hours under "Days" and "Time". Under the section call "Website Blocking by URL Address I put "www.youtube.com". Under the section called "Website Blocking by Keyword" I put "youtube". I "Saved" and "Apply Settings".

Unfortunately, kids are still laughing in my face. It's not filtering/blocking the youtube content when they accessing the app via Apps in Optik. I don't want to block netflix, or prime or other media apps. Just Youtube.

I'm not a network guru, but I understand the basics. I don't no too much about IP Tables and what not. Just looking for a solution.

I know I'm on the right track but need some help. thanks!
Sponsor
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6410
Location: UK, London, just across the river..

PostPosted: Mon Aug 16, 2021 18:25    Post subject: Reply with quote
hmm this is no win situation...however if you are lucky you may have a few options...

but, first read the forum guidelines... https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
then update to a newer build...
than read forum sticky's about IPset https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327261
than try IPset rules...

In general access restriction is not working as it should, as its not blocking https sites...
winning this game you must gain some knowledge, about Iptables and Ipset...(may be DNSmasq too)
Bear in mind your router must be working in Getaway mode with NAT and SPI firewall..if you put it in WAP/switch mode, as its is in the moment...it wont block anything...

Do a forum search and google search about youtube blocking and ddwrt...you may end up with some homework, but at the end you may get the award...

There is one particular iptables rule, that may work or not work on your router it depends from its kernel build...i ll share it later... Smile

have a good read..!!

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55179 WAP
TP-Link WR1043NDv2 -DD-WRT 55303 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55460 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55460 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55363 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
tedm
DD-WRT Guru


Joined: 13 Mar 2009
Posts: 554

PostPosted: Sun Aug 29, 2021 17:42    Post subject: Reply with quote
Setup a DNS server then define the IP address for "sesamestreet.com" or "barneyandfriends.com" or some such for all of the variations of the Youtube.com domain names. (yout.ube, etc.)

The app will get the incorrect IP addresses for Youtube when it queries your DNS server and fail.

Don't bother with access list restrictions. Youtube knows that they are unloved in many quarters and routinely rotates through IP addresses in an effort to get around network blocks.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12837
Location: Netherlands

PostPosted: Sun Aug 29, 2021 17:56    Post subject: Reply with quote
The main problem: it seems we are talking about a WAP that will not block anything.


Blocking has to be done on the main router.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum