Content Filtering

5-1

M-10153-01

Chapter 5

Content Filtering

This chapter describes how to use the content filtering features of the Double 108 Mbps Wireless

Firewall Router WGU624 to protect your network. These features can be found by under the

Content Filtering heading in the main menu of the browser interface.

The Double 108 Mbps Wireless Firewall Router WGU624 provides you with Web content

filtering options, plus browsing activity reporting and instant alerts via e-mail. Parents and

network administrators can establish restricted access policies based on time-of-day, Web

addresses and Web address keywords. You can also block Internet access by applications and

services, such as chat or games.

Blocking Access to Internet Sites

The WGU624 wireless router allows you to restrict access based on Web addresses and Web

address keywords. Up to 255 entries are supported in the Keyword list.

To block access to Internet Sites, select Block Sites under the Content Filtering heading in the

main menu of the Web browser interface.

Keyword application examples:

•

If the keyword "XXX" is specified, the URL <http://www.badstuff.com/xxx.html> is blocked.

•

If the keyword “.com” is specified, only Web sites with other domain suffixes (such as .edu or

.gov) can be viewed.

•

If you want to block all Internet browsing access during a scheduled period, enter the keyword

“.” and set the schedule in the Schedule menu.

Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

5-2

Content Filtering

M-10153-01

The Block Sites menu is shown below:

Figure 5-1:

Block Sites menu

To enable keyword blocking, select either “Per Schedule” or “Always”, then click Apply. If you

want to block by schedule, be sure that a time period is specified in the Schedule menu.

To add a keyword or domain, type it in the Keyword box, click Add Keyword, then click Apply.

To delete a keyword or domain, select it from the list, click Delete Keyword, then click Apply.

To specify a Trusted User, enter that PC’s IP address in the Trusted User box and click Apply. You

may specify one Trusted User, which is a PC that will be exempt from blocking and logging. Since

the Trusted User will be identified by an IP address, you should configure that PC with a fixed IP

address.

Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

Content Filtering

5-3

M-10153-01

Blocking Access to Internet Services

The WGU624 wireless router allows you to block the use of certain Internet services by PCs on

your network. This is called services blocking or port filtering. The Block Services menu is shown

below:

Figure 5-2:

Block Services menu

Services are functions performed by server computers at the request of client computers. For

example, Web servers serve Web pages, time servers serve time and date information, and game

hosts serve data about other players’ moves. When a computer on your network sends a request for

service to a server computer on the Internet, the requested service is identified by a service or port

number. This number appears as the destination port number in the transmitted IP packets. For

example, a packet that is sent with destination port number 80 is an HTTP (Web server) request.

To enable service blocking, select either Per Schedule or Always, then click Apply. If you want to

block by schedule, be sure that a time period is specified in the Schedule menu.

To specify a service for blocking, click Add.

Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

5-4

Content Filtering

M-10153-01

The Block Services Setup menu is shown below:

Figure 5-3:

Block Services Setup menu

From the Service Type list, select the application or service to be allowed or blocked. The list

already displays several common services, but you are not limited to these choices. To add any

additional services or applications that do not already appear, select User Defined.

Configuring a User Defined Service

To define a service, first you must determine which port number or range of numbers is used by

the application. The service numbers for many common protocols are defined by the Internet

Engineering Task Force (IETF) and published in RFC1700, “Assigned Numbers.” Service

numbers for other applications are typically chosen from the range 1024 to 65535 by the authors of

the application. This information can usually be determined by contacting the publisher of the

application or from user groups of newsgroups.

Enter the Starting Port and Ending Port numbers. If the application uses a single port number, enter

that number in both boxes.

If you know that the application uses either TCP or UDP, select the appropriate protocol. If you are

not sure, select Both.

Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

Content Filtering

5-5

M-10153-01

Configuring Service Blocking by IP Address Range

Under “Filter Services For”, you can block the specified service for a single PC, a range of PCs

(having consecutive IP addresses), or all PCs on your network.

Scheduling When Blocking Will Be Enforced

The WGU624 wireless router allows you to specify when blocking will be enforced. The Schedule

menu is shown below:

Figure 5-4:

Schedule menu

Use the check boxes on this menu to create a schedule for blocking content. Then click Apply.

Time Zone.

Select your local time zone. This setting will be used for the blocking schedule and

for time-stamping log entries.