How to bypass parental controls completely...
Hardware Version :
Firmware Version :
ISP :
One of the main reasons for me to buy the DECO, apart from the mesh functionalities, was the parental control. I needed a tool to limit the internet access to get my kids spending more time on homework.
Within days my son was able to bypass completely the parental controls by using one of the many VPN apps available in the Apple App Store...
... I block YouTube, he is using the VPN app to get on YouTube
... I use the WiFi pause for his profile, he is still watching YouTube or can go to any other website
With other words, the full parental control can be bypassed using a VPN app. The only thing that seems to work is to put his device on the blacklist, then directly the WiFi is disabled.
I already reported this some time ago on another thread, have reported it to TP-Link directly, but it's still possible to bypass.
So, if you want to try yourself...
- Get yourself a iPhone
- Assign it to a test profile
- Validate that the WiFi is working and go to YouTube
- Disable for the test profile YouTube
- YouTube stops working
- Install from the App Store the "VPN Master" and start it.
- After you have the VPN working go to YouTube...
- Put the WiFi on pause for the test profile
- And continue to enjoy surfing on the internet
- Put the iPhone on the blacklist
- Notice that the WiFi is disabled
With this post I do not want to encourage children to bypass the parental control, but I want to make the parents aware that putting the devices temporary on the blacklist is the only option to block the WiFi.
And... I hope that TP-LINK will start implementing a solution soon. They can start checking to see the difference between the logic in the "blacklist" and the "WiFi pause"....
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
This is expected behaviour on all networking devices that use scheduling and session-based firewalling (link to stateful firewalling) . This effects enterprise grade firewalls as well.
what is happening is that your son is starting a game session or stream session prior to the schedule taking place, when that schedule starts then all new sessions will be blocked however the existing session is allowed to continue because the session start time is before the schedule activating.
- Copy Link
- Report Inappropriate Content
I have some success with adding custom firewall rules to my AC2300, which may help. Write-up here:
https://community.tp-link.com/en/home/forum/topic/171132?replyId=380000
I have no experience of the Deco but guess you'd need to do this on the main unit that's connected to the outside WAN.
- Copy Link
- Report Inappropriate Content
@JazzPackages
Free VPN & security unblock Proxy - snap master VPN from Innovative Computing
VPN Free - Betternet Hotspot VPN & private browser from Betternet LLC
- Copy Link
- Report Inappropriate Content
@hansremmerswaa Can you see on the app wether he uses youtube or do you see him physical use it???(When he uses vpn)
- Copy Link
- Report Inappropriate Content
@hansremmerswaa do you have any reccommended vpns without malware or virus?
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 47
Replies: 0
Voters 2

