New Router Needed - Teenage Boys. Tracking, Logging, Locking IPs and Wi-Fi 6 Would Be Nice

Heya - need a WIFI 6 router that makes managing 3 boys and internet easy.

My R7000 with ASUS firmware has been doing great. super stable and surprisingly good.
But it is time now I need to go to WIFI 6 (1 strong unit or Mesh)

Big new need is my 3 boys, 13, 12 and 10 are very good at pushing the envelope. Especially the 13 year old has mastered

  • ALT+F4
  • Incognito browsing
  • sneaking laptops into their rooms at nite(which has a fine) - and playing (Phones are banned from bedrooms… homework is in bedrooms)
  • spreading time over multiple devices (Gaming desktops (each has their own), laptops

So, I am after something that

  • logs traffic by IP or MAC - logs
  • Ability to switch off internet to certain addresses after a certain time (At night)
  • WIFI 6
  • Low(er) latency - kids game a bit [not essential or high order, more like nice to have]
  • Good signal range

I have pretty shitty NBN FTTN via Aussie BB at 38 Mb/s but also run 2x synology gigabit NAS, 3x wired gigabit desktops etc and way too many wifi devices to count (Google nests, TVs etc). I may get starlink as interim solution till FTTP comes along slowly in WA.

Recommendations I should look out for so I can zoom in on Black Friday / Cyber Monday sales?

Poll Options

  • 35
    Let the kids be - you were free with BBS' and IRCs
  • 5
    Get them ready for 1984 - they can learn hacking
  • 2
    Dude stick to what you have - I have tried and it is all too hard
  • 0
    Have I got a deal for you!

Comments

  • +6

    Good luck with that.

    • +4

      OP should ask his kids, they're likely the tech experts in the house.

      While they're there, perhaps ask them how they'll get around it and why it's not going to stop them.

      Kids are cool like that.

  • +10

    I'm also running an old R7000 + dd-wrt as firmware. Manually map kids' MAC addresses to lock into specific IP range in DHCP, so I can write a script to null-route them at night (past kids' bed time). Kids learnt to randomise their MAC so have to block unknown devices as well. Use dhcp-option to change kids' devices' DNS to another internal dnsmasq instance that has logging + ability to block sites. That also means block out-bound UDP port 53 for kids' IP range so they can't use an external DNS resolvers such as Cloudflare or Google (also that doesn't work when they use DNS over HTTPS). I've got scripts to detect usage of long running VPN sessions masquerading as HTTPS connections & detect usage of Tor, and use iptables to drop all their packets — all running inside R7000 w/ dd-wrt. Yeah, Linux based routers are great…

    That's a lot of work though, and kids grow up so quickly.

    So I just voted stick to whatever you've got, and don't worry too much about it.

    • What about changing their MAC to another device with higher previleges (e.g. one of your devices)?

      • MAC conflict would result something that's not working so you can tell immediately something dodgy is going on.

        • +1

          I mean, it's not like all your devices are bound to be online all the time, right? For example, you leave your house, and your phone MAC is up for grabs.

          • +1

            @theguwithnoname: They aren't doing the network inspection to figure out the trusted MAC yet. If that happens I might have to create multiple WiFi networks.

            My kids are older now so I don't bother anymore.

    • +2

      I laughed so loud. I mean if this helps teach em to constantly evolve skills, then that is cool too.

  • +13

    Why not fix the actual issue? It isn’t a technology problem, it’s a behavioural issue.

    Take all their devices away. Only allow them to be used for school activities at the dinner table where you can keep an eye on them.

    Enforce this for a months, then give them a probation period where they can prove they’re trust worthy again. If they do it again, next time it’s two months.

    • +2

      This is the best approach. They need to learn to manage their own behaviour. You won't be there to stop them gaming instead of doing their uni work.

      • +1

        On the other hand, helicopter parenting like this is quite likely to backfire once they're older and you don't have the ability to police them anymore.

        Kinda gotta keep in mind that kids are just mini humans, and that one day they will be adults. It's your job as a parent to teach them how to self regulate. That's not going to happen by confiscating devices.

        • +2

          In this suggestion the only helicopter parenting is for a proscribed period, then they are allowed to regulate themselves, with the helicopter only returning if they aren't able to. They continually get the chance to regulate themselves, hopefully gradually learning how to before they get too old.

          Unless, by "on the other hand" you meant "yes I agree, and" and the bit about helicopter parenting is about OPs desire to prevent the kids from doing things that aren't allowed. Sorry if I misinterpret

          Also I was going to add that I think the time period should start at 1 day, then double each time, as you can expect them to mess up a lot to begin with, then the "punishment" time is short, and once they have had plenty of time to practice then it can get to a month or two months

          • @Quantumcat: you understood me correctly. It is to define clear boundaries + have the ability to monitor. Cyber bullying is a much bigger threat than parents realise and many innocent kids have come to harm (more so girls than boys, but still).

            So we have a fair level of self regulation, and the dopamine drug driving deviations. The problem of always punishing rather than setting clear boundaries is all the conversations are negative, rather than positive (including if they hacked it… that would be a positive chat ;)

        • +4

          Basic discipline for children that have lost the right for independence due to consistent bad behaviour isn’t “helicopter parenting”.

          • @PainToad: exactly.

          • @PainToad: Yeah, it's just parenting - there are two opposites in parenting, one is keeping kids safe and one is teaching them the skills they need for a successful adulthood. Too far in either direction is bad for kids (either never getting to experience a mistake and learn, or being exposed to situations that can scar them), the art is in the balancing of the two

    • -2

      And tell them that loving parents belt their kids! (apart from the seat belts)
      Or get the internet from the Catholic diocese?

  • +1

    All you need to do is set them up a their own pass worded network and put it on a timed operation, 7am to 7pm or whatever suits you.

  • +1

    Keep an eye out for that secret starlink antenna on your roof?

  • +8

    This is nothing.

    Wait until they push the envelope when they discover girls and illicit drugs.

    Enjoy the easy times you currently have.

  • +6

    Let em kids access their pron in peace!

  • I found that it can help to heavily rate limit kids devices out of hours so it isnt blocked but super slow.

    Note with ability to change mac addresses they can always change mac to one of the adult devices…

  • +8

    Thanks for training future infosec workers as they bypass all of this bullshit. Maybe try talking to them instead?

  • the router you require is a new one here made by the lmgtfy brand, It does everything you need
    head over to router

  • +4

    None of this is targeting the root cause of the problem.

  • +5

    You can't fix a social problem with a technical solution, I think reaching for a locked-down network is probably the wrong way to go about it - it certainly was for me as a teenager.

    To the actual question from a purely 'I want cool networking gear' perspective, you can't go wrong with something like a Unifi U6 Access Point and an EdgeRouter. It's an easy way to dip your toes into the enterprise-like space, with more control than you'll know what to do with.

    • +1

      Our kids went to Catholic school. They used a cheap IT contractor that secured all access to undesirable sites.
      Whilst the Front USB ports were locked, kids were extra quick to open a pc whilst the teacher was at a break.
      They then found another usb port on the motherboard that had no software lock so they quickly rewired the box.
      Then every kid had a stick with a customized browser. The daring kids all ensured they could load up Pornhub over the school network just to prove the fact that they could work around a blockade in no time at all!

      • Hah nice. Yeah we got up to some similar shenanigans in high school but sounds like we had an easier time than you, that's impressive.

    • thank you @Fuzzy Toaster
      for a large home, world you go mesh?

      one u6 pro and another light unit?

      I have wired cat 5e between the two locations I would install the second AP

      • Multiple wired APs will always be the best solution, and mesh is much better than those dumb repeater things.

        It's easy to get multiple APs unnecessarily though. I'm surprised that my single U6 lite, at one end of the house, gives plenty good 5Ghz reception in the yard at the opposite end of the house.

  • +2

    If your children are suitable technically inclined, nothing you do (barring full 1984 style censoring, but if you go down this route, you probably won't see your kids after they turn 18) will do anything beyond annoy them and make them more secretive.

    They're people too. Talk to them.

  • Poor kids.

    • quite the contrary, they have 3x esports setups with GTX1070 to RTX 3080 cards and a whole desk setup many kids would be so happy with, when they have to share…

      I think gaming is generally good, especially minecraft and its mods like skyblock…

      First world problems. I travel a lot too and they fool my wife too easily.

      • +3

        Poor as in i feel sorry for them not poor money wise.

  • +1

    You're going to need to set up a proxy server with logins to enable internet access. Then only allow the proxy access to the internet.

    • yeah, I am kinda thinking that I may have to give each their own unique access code.

  • +3

    I disagree with much of the other commentators. We had to work hard to find porn as 13 y/o's. Kids these days expect to have it served up instantly. Block one avenue, let him overcome it for a bit then block the new method. It'll also teach him valuable life skills about lying and how to get around authority figures - both very useful later in life.

    Another option is to focus on reducing opportunity. Increase his chores, family board game nights, get him to help the 10 y/o with some tutoring, take him for an evening run, get a weights machine etc.

Login or Join to leave a comment