FRITZ!Box 7330 Service - Knowledge Base

FRITZ!Box 7330 Service

Restricting Internet access using parental controls

You can set up different access profiles in the FRITZ!Box and define the following for each of them in detail:

  • how long and when Internet use is allowed on individual days of the week.
  • which websites are blocked or which are the only ones that can be accessed.
  • which network applications (for example online games) are blocked from accessing the Internet.

You can assign each access profile to one or more network devices in the FRITZ!Box home network. This way you can ensure that all devices such as computers, game consoles, or smartphones used by a particular person have the same limitations and are subject to the same budget.

Requirements / Restrictions

  • The parental controls function is not available if the FRITZ!Box shares the Internet connection of another router ("IP client mode"). In this case, regulate Internet access in the other router.
  • As a rule, network devices in the guest network (private hotspot) are assigned to the "Guest" access profile and cannot be regulated on an individual basis.

Important:Some of the settings described here are only displayed if the advanced view is enabled in the user interface. The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS

1 Preparations

Creating filter lists

If you would like to prevent certain websites from being displayed (blacklist) or only want to allow users to access certain websites (whitelist), enter the addresses (URLs) in the relevant filter list:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Lists" tab.
  4. Click on the "Edit" link next to the list you would like to edit.

    Important:If you enabled the filter for websites for a specific access profile, as a rule direct IP access to websites is blocked for members of that profile. You can check the list of "Permitted IP addresses" to see which IP addresses the FRITZ!Box prevented from being called up and release them if you want.

  5. Enter the Internet addresses (URLs) or IP addresses in the field (no more than 500 entries per list). Press the space bar after entering each address.

    Example:
    poker.com xxx.com aggro.tv

  6. Click "OK" to save the list.

Configuring network applications

If you would like to block certain network applications (such as online games) from accessing the Internet, you must first configure this in the FRITZ!Box:

Important:You can only block network applications that exclusively use the TCP and UDP protocols.

2 Setting up an access profile

General access profiles are preconfigured in the FRITZ!Box. All network devices in the FRITZ!Box home network that have not been assigned to a specific profile are automatically assigned to the "Standard" access profile. The "Guest" access profile is for all network devices that use guest access.

If you would like to regulate Internet access for particular users or user groups on an individual basis, set up a separate access profile for each of them:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the "New access profile" button.
  4. Enter the name of the user or user group you would like to regulate Internet access for in the "Name" field.
  5. Define when Internet use should be allowed in the "Period" window.
  6. Define how long members of this profile are allowed to use the Internet on each day of the week in the "Time Budget" window.
  7. Enable the option "shared budget" if the maximum Internet usage time should be shared by all network devices belonging to this access profile.

    Important:A shared budget only makes sense with access profiles for individual users who use more than one network device to access the Internet. This option should not be enabled for user groups.

  8. Enable the option "Filter web sites" if you would like to prevent certain websites or unknown sites from being accessed.
    1. Enable the option "Allow HTTPS queries" if you want to allow encrypted Internet access.

      ATTENTION!If you enable this option, HTTPS websites are displayed as a rule, even if their URLs are on the blacklist or are not on the whitelist!

    2. Select the filter you would like to use for Internet access:
      • Select "Permit web sites (whitelist)" if only permitted websites should remain accessible,
        • or
      • Select "Block web sites (blacklist)" if only certain websites should be blocked.
  9. Select which network applications you would like to block for this access profile from the drop-down list "Block network application".
  10. Click "OK" to save the access profile.

3 Assigning an access profile

You can assign access profiles to all network devices that were connected to the FRITZ!Box home network at least once:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Select the desired access profile for the network device from the drop-down list.

    Example:
    You created the access profile "Max" for your son. Max uses the FRITZ!Box's Internet connection with his smartphone, his game console, and his computer. In order to ensure that Max's budget includes Internet access from all of these, assign all three of the devices to the access profile "Max".

  4. Click "Apply" to save your settings.

4 Implementing additional security measures

Adjusting the "Standard" access profile

In order to prevent the parental controls from being bypassed, you should deny Internet access to members of the the "standard" access profile:

Note:All network devices in the FRITZ!Box home network that have not been assigned to a specific profile are automatically assigned to the "Standard" access profile.

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the (edit) button for the "Standard" profile.
  4. Enable the option "never" in the "Time Limit" section.
  5. Enable the option "Use of guest access blocked".
  6. Click "OK" to save the access profile.

Setting up password protection for FRITZ!Box

In order to rule out manipulation of the access profiles, you should protect your FRITZ!Box settings with a FRITZ!Box user name and/or password:

  1. Click "System" in the FRITZ!Box user interface.
  2. Click "FRITZ!Box Users" in the "System" menu.
  3. Click on the "Login to the Home Network" tab.
  4. Enable the option "Login with FRITZ!Box user name and password",
    • or, if you have not configured any users yet:
      • Enable the option "Login with the FRITZ!Box password" and enter a password of your choice that will be required to access the FRITZ!Box user interface.
  5. Click "Apply" to save your settings.