Recommend:
To the knowledge base
Knowledge document #3396

Blocking internet use for certain network applications in the FRITZ!Box

The FRITZ!Box parental controls not only allow you to limit internet access time, you can also completely block particular applications (for example online games) from accessing the internet. You can use access profiles to specify which blocks apply to which devices.

Important:To bypass internet blocks, some applications (for example TeamViewer, Messenger) are capable of using the ports used to surf the internet instead. Therefore, the FRITZ!Box cannot block only this type of application from using the internet. Instead, block internet access for the respective device or set up a firewall on it.

Requirements / Restrictions

  • You can only block applications that exclusively use the TCP and UDP protocols.
  • Applications cannot be blocked if the FRITZ!Box uses the internet connection of another router. In this case, regulate internet use in the other router.

Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.

1 Preparations

  1. Determine which ports and IP protocols the application uses. Refer to the manufacturer for this information, for example consult the manual.

    Note:You can find a non-binding overview of the ports used by many applications at www.portforward.com.

2 Adding a network application

To block particular applications from using the internet, first set up rules in the FRITZ!Box for the ports and protocols used by the application:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filter" in the "Internet" menu.
  3. Click on the "Lists" tab.
  4. Click "Network Applications" and then "Add Network Application".

    Note:Some applications are preconfigured in the FRITZ!Box. Click the corresponding (Edit) button if you want to customize them.

  5. Enter the name of the application in the "Network Application" field.
  6. Click the "New Protocol" button.
  7. Select the protocol used by the application to send data to the internet.
  8. If you selected TCP or UDP, enter the source port(s) and destination port(s) used to establish the connection.
  9. Click "Apply" to save the settings.
  10. If the application uses different protocols and/or ports, repeat steps 6 - 9 for these as well.

    Example:
    Nine different rules are required to set up the game FIFA 2022 for PlayStation as a network application in the FRITZ!Box (source: Port Forward):

  11. Click "Apply" to save the settings.

3 Blocking a network application in access profiles

Block the applications in all the access profiles whose internet use you want to regulate:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filter" in the "Internet" menu.
  3. Click on the "Access Profiles" tab.
  4. Click the (Edit) button for the access profile you want to configure.
  5. Click "Advanced Settings".
  6. Select the applications you want to block from the drop-down list "Block network application".
  7. Click "Apply" to save the access profile.

The application is now blocked. Restart the FRITZ!Box so that the filter also applies to devices that accessed the internet while you were configuring it.

4 Implementing additional security measures

Changing the FRITZ!Box password

To prevent unauthorized persons from logging in to the FRITZ!Box with the password on the underside of the device and changing its settings, configure a new password:

  1. Click "System" in the FRITZ!Box user interface.
  2. Click "FRITZ!Box Users" in the "System" menu.
  3. Click the (Edit) button next to the user for the FRITZ!Box password (for example "fritz1234").
  4. Enter an individual password that is strong enough. Do not use a password that you already use for other services, such as an email account, Amazon, Facebook, or Google.

    Tip:Keep the password in a safe place! You must enter the password to access the user interface.

  5. Click "Apply" to save the settings.

Adjusting the "Standard" access profile

To ensure that new devices in the home network cannot bypass the web filters, block the "Standard" access profile from using the internet:

Note:The "standard" profile is valid for all devices in the home network that have not been assigned to a specific access profile, and is automatically assigned to all new devices in the home network.

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filter" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the (Edit) button for the "Standard" profile.
  4. Enable the option "never" in the section "Time Limit".
  5. Enable the option "Use of guest access blocked".
  6. Click "Apply" to save the access profile.



Related topics:

Language selection