Hi community,

My 6 year old daughter is getting her new iPad from Santa.
Is it possible to use Mikrotik as a webfilter to limit the web access for child safe sites?
I assume yes, some child safe access lists are public?
Someone knows more? Or do I need to redirect the traffic from her IP address to a raspberry running squid?

Thanks in advance,
Regards, Christian

block all and allow know safe sites

Separate network for her devices and use something like OpenDNS to filter DNS requests?

I use Amazon Fire tablet to do exactly this....and it's a lot cheaper.
but if Santa has already paid for the iPad, use OpenDNS and set youtube APP in restricted mode.
Mikrotik Kid control seems also useful, but with a brief look, it seems provide schedule and bandwidth limits,rather than web filtering.

I am not sure allowing known websites only would work so well as many sites would make connection to other sites from it's own page. Not to mention the APPs. Later on you then likely to be back to the forum searching IP address of facebook , twitter or Instagram so you can block them.....

Amazon kids freetime is also available in iOS so worth a try.

MikroTik Kid Control is brilliant for controlling who can access the net at what times and at what speeds across a grouped amount of devices.
No good for site control though.

This is what I do.
If you use Mikrotik DHCP server just make static DHCP lease for MAC address of iPad from Santa, then dstnat its DNS queries to e.g. OpenDNS FamilyShield: The IP address 208.67.222.123 is for OpenDNS FamilyShield service:
https://support.opendns.com/hc/en-us/ar ... structions

This will block majority of "inappropriate websites" for standard user.

ok, I wil do so.

thanks very much for the advise..

regards
Christian

This is what I do.
If you use Mikrotik DHCP server just make static DHCP lease for MAC address of iPad from Santa:

Code: Select all

/ip dhcp-server lease
add address=10.0.0.123 mac-address=AA:BB:CC:DD:EE:FF

/ip firewall nat
add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address=10.0.0.123 to-addresses=208.67.222.123 to-ports=53
add action=dst-nat chain=dstnat dst-port=53 protocol=tcp src-address=10.0.0.123 to-addresses=208.67.222.123 to-ports=53

The IP address 208.67.222.123 is for OpenDNS FamilyShield service:
https://support.opendns.com/hc/en-us/ar ... structions

This will block majority of "inappropriate websites".

That's a nice tip! Thx