1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

[Tomato by shibby] Parental controls with openDNS

Discussion in 'Tomato Firmware' started by drfeelgood, Feb 11, 2013.

  1. drfeelgood

    drfeelgood Serious Server Member

    That's my problem, I got Tomato by shibby 1.28.0000 MIPSR2-105 K26 USB Mega-VPN-64K on an ASUS RT-N66U.

    I flawlessly configured whole settings but now I'm stuck on Parental Control to restrict access for lil' sister o' mine. There's no option at all allowing that.

    What I wanna do is to use OpenDNS' Parental Control for her MAC/Ip Address only (I've bound her MAC address to a settled IP through Static DHCP/ARP/IPT).

    But for the rest of the family no.

    Is it possible?

    If is possible How can I do that?
     
  2. Bird333

    Bird333 Network Guru Member

    Use dnsmasq custom options.
    Code:
    interface=br1 <=whatever interface sister's device is on.
    dhcp-option=br1,3,192.168.*.1 <=router IP address
    dhcp-mac=sister,**:**:**:**:**:** <= Sister's MAC address
    dhcp-option=sister,6,208.67.220.220
    dhcp-range=br1,192.168.*.100,192.168.*.249,255.255.255.0,1440m
    I have a separate network in my setup so a couple of the lines may not be necessary. The main thing is the 'dhcp-mac' option and the next line. The dhcp-mac option assigns her MAC to the name 'sister' and the next line says 'sister' is to use opendns (208.67.220.220) for 'sister'. You can't just use her MAC directly, I've tried. :) For more info you can see http://linux.die.net/man/8/dnsmasq and http://www.ietf.org/rfc/rfc2132.txt After you make the changes, save and reboot. It may take a couple of minutes for it to take effect so don't think it didn't work if you can still access blocked sites right away. You may have to release and renew you sister's ip. Also, a static ip is not necessary for this.
     
    drfeelgood likes this.
  3. drfeelgood

    drfeelgood Serious Server Member

    Thx for the info but I'm totally new to this dnsmasq tho, I didn't understand btw, interface is not static, sometimes is her, sometimes is my mum or my brother.
    and what is this dhcp range parameter? I've already set range in shibby's configuration.

    How could I setting up dnsmasq for ONLY her MAC, using FamilyShield by OpenDNS? (I mean 2 DNS in a row 208.67.220.123 and 208.67.222.123)
    to understand better in dnsmasq I'd write:

    dhcp-mac=sister, **:**:**:**:**:**
    dhcp-option=sister,6,208.67.220.123(?)208.67.222.123
     
  4. Bird333

    Bird333 Network Guru Member

    Just try the two lines you have above. The asterisks need to be your sister's mac. Also just use one address for opendns to keep it simple.
     
  5. drfeelgood

    drfeelgood Serious Server Member

    doesn't work
     
  6. jerrm

    jerrm Network Guru Member

    Just tested myself and it seems to work fine here. Make sure "Intercept DNS Port" is NOT checked in the gui. Use only the two lines in the above post, but as stated, only use the first dns server address to keep it simple. Save the changes on the router, clear the cache on the device and reboot it.
     
  7. heebo1974

    heebo1974 Serious Server Member

    I would need 4 different mac addresses which should be restricted to use normal dns server. How do I should proceed ?

    Maybe something like this?
    Code:
    dhcp-mac=youngsters,**:**:**:**:**:** (first mac)
    dhcp-mac=youngsters,**:**:**:**:**:** (second mac)
    dhcp-mac=youngsters,**:**:**:**:**:** (third mac)
    dhcp-mac=youngsters,**:**:**:**:**:** (fourth mac)
    dhcp-option=youngsters,6,208.67.220.123
                           ^
    
    I don't quite understand what that 6 stands for ?
     
  8. heebo1974

    heebo1974 Serious Server Member

    Answering for myself. That worked! Yeah ! :-D
     

Share This Page