On 31/07/15 17:36, Tim Koop wrote:
> I have installed pfsense and I would like to block certain websites
> during certain times of the day for certain computers.  I've looked
> around pfsense as well as a plugin or two, and this looks very
> difficult or impossible to do.  Anyone have any ideas?

For home use (considering spoofing etc. ...) it might be sufficient to
try a combination of firewall rule schedules [1] and firewall aliases to
be used in firewall rules.

One alias might contain IP/FQDN of your computers. You'll use them as
source in the firewall rule/s allowing full access all the time.
Similarly, another alias would define your kids' computers. This alias
will again be the source in two firewall rules blocking some domains or
limiting times of the day.

Then, in a third alias you would list all domains you want to block.
Obviously, this alias will be used as destination in another firewall
rule and the source in this rule will be your kids' alias. In yet
another firewall rule you would define a pass rule during certain times
of the day, applying a schedule in this rule (=> advanced features). As
source you'd again apply your kids' alias. (Since your kids connect with
DHCP and you don't, it should probably be ok to use a LAN range instead
of a kids' alias as source and placing this firewall rule after the full
access rule.)

Carefully designing aliases, schedules and rules, and also considering
firewall rule processing order [2] should probably get you reasonably
close to what you want ...

Regards,
Bob

[1] https://doc.pfsense.org/index.php/Firewall_Rule_Schedules
[2] https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order


_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to