FRITZ!Box 4020 Service - Knowledge Base

FRITZ!Box 4020 Service

Blocking internet use for particular network applications

The FRITZ!Box parental controls not only allow you to limit internet access time, you can also completely block particular applications (for example online games) from accessing the internet. You can use access profiles to specify which blocks apply to which devices.

Important:To bypass internet blocks, some applications (for example TeamViewer, Messenger) are capable of using the ports used to surf the internet instead. Therefore, the FRITZ!Box cannot block only this type of application from using the internet. Instead, block internet access for the respective device or set up a firewall on it.

Requirements / Restrictions

  • You can only block applications that exclusively use the TCP and UDP protocols.
  • Applications cannot be blocked if the FRITZ!Box uses the internet connection of another router. In this case, regulate internet use in the other router.

Note:The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.

1 Preparations

  1. Determine which ports and IP protocols the application uses. Refer to the manufacturer for this information, for example consult the manual.

    Note:You can find a non-binding overview of the ports used by many applications at www.portforward.com.

2 Adding a network application

To block particular applications from using the internet, first set up rules in the FRITZ!Box for the ports and protocols used by the application:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Lists" tab.
  4. Click the "Add Network Application" button in the "Network Applications" section.

    Note:Several applications are preconfigured in the FRITZ!Box. Click the corresponding (Edit) button if you want to customize them.

  5. Enter the name of the application in the "Network application" field.
  6. Click the "New Protocol" button.
  7. Select the protocol used by the application to send data to the internet.
  8. If you selected TCP or UDP, enter the source port(s) and destination port(s) used to establish the connection.
  9. Click "OK" to save the settings.
  10. If the application uses different protocols and/or ports, repeat steps 6 - 9 for these as well.

    Example:
    Nine different rules are required to configure the game FIFA 2016 as a network application in the FRITZ!Box:

  11. Click "OK" to save the settings.

3 Blocking a network application in access profiles

Block the applications in all the access profiles whose internet use you want to regulate:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click the (Edit) button for the access profile you want to configure.
  4. Select the applications you want to block from the drop-down list "Block network application".
  5. Click "OK" to save the access profile.

The application is now blocked. Restart the FRITZ!Box so that the filter also applies to devices that accessed the internet while you were configuring it.

4 Implementing additional security measures

Adjusting the "Standard" access profile

To ensure that new devices in the home network cannot bypass the web filters, block the "Standard" access profile from using the internet:

Note:The "standard" profile is valid for all devices in the home network that have not been assigned to a specific access profile, and is automatically assigned to all new devices in the home network.

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the (Edit) button for the "Standard" profile.
  4. Enable the option "never" in the "Time Limit" section.
  5. Enable the option "Use of guest access blocked".
  6. Click "OK" to save the access profile.

Setting up password protection for FRITZ!Box

To prevent the FRITZ!Box settings from being manipulated, protect access to the FRITZ!Box with a user name and/or password. If you are using the FRITZ!Box password given on the underside of the device, set a new password:

  1. Click "System" in the FRITZ!Box user interface.
  2. Click "FRITZ!Box Users" in the "System" menu.
  3. Click on the "Login to the Home Network" tab.
  4. If each user should use a unique password to access the FRITZ!Box, enable the option "Login with FRITZ!Box user name and password".
    • If all users should use the same password to access the FRITZ!Box, enable the option "Login with the FRITZ!Box password" and enter a password that will be required to access the FRITZ!Box user interface.
  5. Click "Apply" to save the settings.