Recommend:
To the knowledge base
Knowledge document #3396

Blocking internet use for particular network applications

The FRITZ!Box parental controls not only allow you to limit internet access time, you can also completely block particular applications (for example online games) from accessing the internet. You can use access profiles to specify which blocks apply to which devices.

Important:To bypass internet blocks, some applications (for example TeamViewer, Messenger) are capable of using the ports used to surf the internet instead. Therefore, the FRITZ!Box cannot block only this type of application from using the internet. Instead, block internet access for the respective device or set up a firewall on it.

Requirements / Restrictions

  • You can only block applications that exclusively use the TCP and UDP protocols.

Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.

1 Preparations

  1. Determine which ports and IP protocols the application uses. Refer to the manufacturer for this information, for example consult the manual.

    Note:You can find a non-binding overview of the ports used by many applications at www.portforward.com.

2 Adding a network application

To block particular applications from using the internet, first set up rules in the FRITZ!Box for the ports and protocols used by the application:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filter" in the "Internet" menu.
  3. Click on the "Lists" tab.
  4. Click the "Add Network Application" button in the section "Network Applications". If the button is not displayed, enable the Advanced View first.

    Note:Some applications are preconfigured in the FRITZ!Box. Click the corresponding (Edit) button if you want to customize them.

  5. Enter the name of the application in the "Network Application" field.
  6. Click the "New Protocol" button.
  7. Select the protocol used by the application to send data to the internet.
  8. If you selected TCP or UDP, enter the source port(s) and destination port(s) used to establish the connection.
  9. Click "OK" to save the settings.
  10. If the application uses different protocols and/or ports, repeat steps 6 - 9 for these as well.

    Example:
    Nine different rules are required to set up the game FIFA 2022 for PlayStation as a network application in the FRITZ!Box, for example:

  11. Click "OK" to save the settings.

3 Blocking a network application in access profiles

Block the applications in all the access profiles whose internet use you want to regulate:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filter" in the "Internet" menu.
  3. Click on the "Access Profiles" tab.
  4. Click the (Edit) button for the access profile you want to configure.
  5. Select the applications you want to block from the drop-down list "Block network application". If the drop-down list is not displayed, enable the Advanced View first.
  6. Click "OK" to save the access profile.

The application is now blocked. Restart the FRITZ!Box so that the filter also applies to devices that accessed the internet while you were configuring it.

4 Implementing additional security measures

Setting up password protection for FRITZ!Box

To prevent unauthorized persons from logging into the FRITZ!Box and changing its settings, protect access to the FRITZ!Box with a password:

  1. Click "System" in the FRITZ!Box user interface.
  2. Click "FRITZ!Box Users" in the "System" menu.
  3. Click on the "Login to the Home Network" tab.
  4. If each user should use a unique password to access the FRITZ!Box, enable the option "Login with FRITZ!Box username and password".
    • If all users should use the same password to access the FRITZ!Box, enable the option "Login with the FRITZ!Box password" and enter a password for accessing the FRITZ!Box user interface.
  5. Click "Apply" to save the settings.

Adjusting the "Standard" access profile

To ensure that new devices in the home network cannot bypass the web filters, block the "Standard" access profile from using the internet:

Note:The "standard" profile is valid for all devices in the home network that have not been assigned to a specific access profile, and is automatically assigned to all new devices in the home network.

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filter" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the (Edit) button for the "Standard" profile.
  4. Enable the option "never" in the section "Time Limit".
  5. Enable the option "Use of guest access blocked".
  6. Click "OK" to save the access profile.



Related topics:

Language selection