Blocking websites

[CJW]

My son's computer is running Windows 7 Pro w/the browsers IE8 & Chrome 90.
I am having a hard time remembering how to block certain websites from each browser.

For IE8: I opened the Windows Control Panel>Internet Options>Security tab>Restricted Sites zone & clicked 'Sites'. I then add a few adult websites & clicked 'Close'. But after starting IE8, I can still access any of the websites.

For Chrome 90: I don't even remember where to begin.

Chrome is his default browser.
I don't think he ever uses IE8, but I want to block the adult sites just in case he does use it.

Can I get some help please?

 

[torchwood]

Hi CJW,
dont know about chrome, never used it.
Re IE8 its way outta date and i suspect, unless you have updates turned off, your comp is trying to update to IE11.

as your son doesnt use it i would turn it OFF

control panel >>> programs and features.... features (bottom left). then in the small window that opens UNcheck IE8, or whichever version it is

 

[Barman58]

The way I've always recommended families to go is by using an external protection regime . The one that has been around longest is I believe OpenDNS which has many options to block specific site categories or specific sites, the other thing is that as It's external it is more effective and difficult to circumvent, youngsters today are very computer literate but so are the people at OpenDNS. They also set up their own categories and keep them valid when actual addresses change.

I've used it in the past for small companies and businesses where the owners wish to control their liability when staff misuse internet access (it can also block and or Limit social networking access to a maximum or specific time set If that is a requirement)

More into here ... How to Set Up Whole-House Parental Controls with OpenDNS

 

[townsbg]

I know of plugins for firefox that block sites but for pro you can set up group policy on firefox esr and that has site blocking capabilities. Get Firefox for your enterprise with ESR and Rapid Release I don't know about chrome. I suspect that there are also plugins.

 

[Alejandro85]

I would simply add any site to block to the hosts file, so it doesn't even resolves the DNS and is simple enough to be done with a normal text editor. As you need admin privileges to modify it, your son won't be able to revert himself (as long as you don't make him an admin, of course).

It's also a global protection. Any browser-specific block can be trivially circumvented by downloading a third browser and using it to access the banned websites.

Off-topic: Why use IE8 at all. Even IE11 is totally obsolete by current standards, much more an earlier version. There is no reason to even have it installed nowadays.

 

[CJW]

Hi CJW,
IE8 its way outta date and i suspect, unless you have updates turned off, your comp is trying to update to IE11.

Yes, Windows Updates is turned off & thank you for the instructions on turning off IE8; I forgot about that procedure.

The way I've always recommended families to go is by using an external protection regime. The one that has been around longest is I believe OpenDNS ...

Thanks for the link. I read the information & got a little confused about some things.
Since I want to block adult websites on his computer only, I should follow this page, correct?

I would simply add any site to block to the hosts file, so it doesn't even resolves the DNS and is simple enough to be done with a normal text editor.

Off-topic: Why use IE8 at all. Even IE11 is totally obsolete by current standards, much more an earlier version. There is no reason to even have it installed nowadays.

How do I use the Host file?
He doesn't use IE, but I forgot how to turn it off. Thanks to torchwood, it's now turned off. I was going to completely remove IE using Revo Uninstaller, but I figured that would cause me too much of a headache.

 

[Alejandro85]

How do I use the Host file?

You may find detailed instructions by following this tutorial:
How to Access and Use the Hosts File in Vista, Windows 7, and Windows 8

 

[townsbg]

IE is very thoroughly integrated into Windows. Don't try to force remove it, especially with revo uninstaller. Follow this guide: Disable Internet Explorer on Windows - Browsers | Microsoft Docs

 

[file3456]

I've been using OpenDNS since it was released in ~2007 or so. It's now owned by Cisco. Back then their content filtering was down by St. Bernard. Not sure if that's the case anymore or not.

You can use OpenDNS in one of two ways. One is to add their two DNS IP addresses to the network properties you see in that image for the Windows 7 instructions. The other is a broadsword approach and that is to add the OpenDNS DNS IPs in your router or modem. You'll need to refer to your router's or modem's documentation to access those settings.

Now note that he can just go back in and change the DNS IPs to something else like Google's or Cloudflare's and bypass the OpenDNS filtering altogether. Even more so if a VPN is used. So to help prevent this make sure the Windows account is not an administrator account. The other thing that can be done is through group policy if you have a Windows version that allows group policy. Off the top of my head that'd be versions Pro and above, not Home.

To get into group policy type gpedit.msc in the search box under the start orb. Now open the following: User Configuration | Administrative Templates | Network | Network Connections. Now look to the right for "Prohibit TCP/IP advanced configuration and enable it. I'd reboot. It would probably be a lot better to use a non Admin. account since then he can't use a VPN or change things you don't want changed. The installation of software will have to be by you. You'll only be able to run portable software and that could be a factor. By in large, if he's computer smart you have to be smarter. It would require group permissions, and Kiosk-like software, etc. FrontFace Lockdown can help, but don't go overboard disabling things that don't need to be changed like wallpaper and what have you. FrontFace Lockdown Tool - lock down a PC as kiosk terminal

In addition to using OPenDNS, here are some other tools to help further lock down things if necessary.

PC Screen Watcher - monitor and restrict application usage

Process Blocker - prevent some programs from running

Ratool (Removable Access Tool) - control removable storage devices


Now here's the deal, if your IP address ever changes, OpenDNS won't work. So you'll want to use the update client, or if your IP is like mine from Comcast and rarely changes (it's called a sticky IP address. I change it myself), then you can manually change your IP to the new IP in your OpenDNS settings. To make sure your IP is updated if it should ever change, go to Settings in OpenDNS. See screenshot. Dynamic IP: General Information for OpenDNS usage – OpenDNS

I would run the client on your computer and not his.


Now for some more nerdy information. You can customize the block page he'll get with an image. But Cisco uses their own certificate for the TLS encrypted connection for the block page so you might need to install their certificate in the computer's certificate store. This was never an issue prior to Cisco taking over OpenDNS. This is not hard to do at all. If you find the block page throws a insecure error, then download the certificate here. Block Page Errors: Installing the Cisco Umbrella Root CA – OpenDNS Just download the certificate, double click on it and hit next on through. It'll install into Windows. You could do it on a per browser basis like the instructions indicate, but I don't do that.

 

[file3456]

You DO NOT! want to uninstall or even disable IE. IE is an integral part of the OS whether you think so or not. Just leave it be and don't use IE. That simple.

 

[goodlad]

why not try through Anti-virus software, if you're using one ? For instance in my Bitdefender - I have Parental Advisor through which you could control & even check the activity as well, on what your son browses.