Jkay22 wrote:
Got a question I’m hoping someone can help me with. My husband has had issues with sexual addiction so he had me set up screen time and whatnot. I have it set to 12+ and I have to approve any websites he needs to use. However he is an IT tech and I have a feeling he is somehow finding ways to tunnel past the restrictions….
Usual approach for network access control here would be RADIUS authentication for network access (media access control-based authentication is trivially bypassed) and the user profiles then tie into firewall prohibitions and related rules, and probably with all outbound traffic blocked except that explicitly permitted. This all involves adding DNS / DoH / DoT blocks at both routing and user layers, and blocking Private Relay (configure translations for mask.icloud.com and mask-h2.icloud.com as NXDOMAIN) and blocking common VPN shenanigans (at the router, and at the application layer), and running your own DNS filtering and network monitoring.
Basically, you become network IT, and this also with “pro-sumer” or higher-grade networking gear and network services installed. (Network gear recommendations available upon request.)
Pragmatically, this whole effort usually degrades into manually-permitting specific sites and specific services, and blocking all other outbound connections; the IT version of Whac-A-Mole.
And — as parents tend to learn late, if at all — any sufficiently determine kid can bypass parental controls and firewalls, and on an allowance-scale budget.
As for an adult with a adult budget and access, yeah, I can bypass your puny blocking efforts. I can bypass any network I can lock down myself, too.
That might be some service that emails pictures for instance, or as simple as cellular-connected devices or access to neighbors’ Wi-Fi; as paths you don't know about, and cannot control. Things can and do get stinky, too.
This whole effort just isn’t something that can be externally imposed. Not technically.
Viewed positively, folks that are good at this sort of IT can be in demand in the jobs market, though.
