Reference Manual for the Model RP614 v2 Web Safe Router

3-2

Content Filtering

Blocking Access to Internet Sites

The RP614 v2 router allows you to restrict access based on web addresses and web address

keywords. Up to 255 entries are supported in the Keyword list. The Block Sites menu is shown in

Figure 3-1

below:

Figure 3-1: Block Sites menu

To enable keyword blocking, select either “Per Schedule” or “Always”, then click Apply. If you

want to block by schedule, be sure that a time period is specified in the Schedule menu.

To add a keyword or domain, type it in the Keyword box, click Add Keyword, then click Apply.

To delete a keyword or domain, select it from the list, click Delete Keyword, then click Apply.

Keyword application examples:

•

If the keyword "XXX" is specified, the URL <http://www.badstuff.com/xxx.html> is blocked.

Reference Manual for the Model RP614 v2 Web Safe Router

Content Filtering

3-3

•

If the keyword “.com” is specified, only websites with other domain suffixes (such as .edu or

.gov) can be viewed.

•

If you wish to block all Internet browsing access during a scheduled period, enter the keyword

“.” and set the schedule in the Schedule menu.

To specify a Trusted User, enter that PC’s IP address in the Trusted User box and click Apply.

You may specify one Trusted User, which is a PC that will be exempt from blocking and

logging. Since the Trusted User will be identified by an IP address, you should configure that

PC with a fixed IP address.

Blocking Access to Internet Services

The RP614 v2 router allows you to block the use of certain Internet services by PCs on your

network. This is called services blocking or port filtering. The Block Services menu is shown

below:

Figure 3-2: Block Services menu

Services are functions performed by server computers at the request of client computers. For

example, Web servers serve web pages, time servers serve time and date information, and game

hosts serve data about other players’ moves. When a computer on your network sends a request for

service to a server computer on the Internet, the requested service is identified by a service or port

number. This number appears as the destination port number in the transmitted IP packets. For

example, a packet that is sent with destination port number 80 is an HTTP (Web server) request.

To enable service blocking, select either Per Schedule or Always, then click Apply. If you want to

block by schedule, be sure that a time period is specified in the Schedule menu.

Reference Manual for the Model RP614 v2 Web Safe Router

3-4

Content Filtering

To specify a service for blocking, click Add. The Add Services menu will appear, as shown below:

Figure 3-3: Add Services menu

From the Service Type list, select the application or service to be allowed or blocked. The list

already displays several common services, but you are not limited to these choices. To add any

additional services or applications that do not already appear, select User Defined.

Configuring a User Defined Service

To define a service, first you must determine which port number or range of numbers is used by

the application. The service numbers for many common protocols are defined by the Internet

Engineering Task Force (IETF) and published in RFC1700, “Assigned Numbers.” Service

numbers for other applications are typically chosen from the range 1024 to 65535 by the authors of

the application. This information can usually be determined by contacting the publisher of the

application or from user groups of newsgroups.

Enter the Starting Port and Ending Port numbers. If the application uses a single port number, enter

that number in both boxes.

If you know that the application uses either TCP or UDP, select the appropriate protocol. If you are

not sure, select Both.

Reference Manual for the Model RP614 v2 Web Safe Router

Content Filtering

3-5

Configuring Services Blocking by IP Address Range

Under “Filter Services For”, you can block the specified service for a single PC, a range of PCs

(having consecutive IP addresses), or all PCs on your network.

Scheduling When Blocking Will Be Enforced

The RP614 v2 router allows you to specify when blocking will be enforced. The Schedule menu is

shown below:

Figure 3-4: Schedule menu

•

Use this schedule for blocking content. Check this box if you wish to enable a schedule for

Content Filtering. Click Apply.

•

Days to Block. Select days to block by checking the appropriate boxes. Select Everyday to

check the boxes for all days. Click Apply.

•

Time of Day to Block. Select a start and end time in 23:59 format. Select All day for 24 hour

blocking. Click Apply.

Be sure to select your Time Zone in the E-Mail menu.

Reference Manual for the Model RP614 v2 Web Safe Router

3-6

Content Filtering

Stateful Packet Inspection (SPI), Java, ActiveX, and Cookies

Blocking Options

The WAN Setup options let you enable SPI and blocking of Java, ActiveX, and Cookies. These

options are discussed below.

Using SPI

Stateful inspection technology tracks each packet traversing the router and makes sure that

they are legitimate. A stateful inspection router also monitors the state of the connection

and compiles the information in a state table ensuring that the source and destination of

each packet is valid.

By default, SPI is enabled.

You access the SPI and the Java, ActiveX, and Cookies blocking options from the WAN Setup

menu, as shown below.

Figure 3-5: WAN Setup menu.