Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Steam not being blocked!

    Scheduled Pinned Locked Moved NAT
    14 Posts 4 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      You can set his computer to be totally blocked on schedules…  Other than that...

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        https://forum.pfsense.org/index.php?topic=89842.0

        1 Reply Last reply Reply Quote 0
        • K
          Keyz
          last edited by

          That link dont cover all the ports that steam uses..  https://support.steampowered.com/kb_article.php?ref=8571-GLVN-8711

          However ive now blocked all steam ports to his pc.

          Hopefully :D

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            HTTP (TCP port 80) and HTTPS (443)
                UDP 27015 through 27030
                TCP 27015 through 27030

            Steam Client

            UDP 27000 to 27015 inclusive (Game client traffic)
                UDP 27015 to 27030 inclusive (Typically Matchmaking and HLTV)
                UDP 27031 and 27036 (incoming, for In-Home Streaming)
                TCP 27036 and 27037 (incoming, for In-Home Streaming)
                UDP 4380

            Dedicated or Listen Servers

            TCP 27015 (SRCDS Rcon port)

            Steamworks P2P Networking and Steam Voice Chat

            UDP 3478 (Outbound)
                UDP 4379 (Outbound)
                UDP 4380 (Outbound)

            Those two at the top should make life interesting…

            1 Reply Last reply Reply Quote 0
            • K
              Keyz
              last edited by

              haha yes..

              Well thats his pc now blocked from steam also set with his time schedule..

              And steam even confirms theres no internet connection.. which is nice :D  ;D ;D

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                Tomorrow you will find him on the web googling how to spoof a new MAC daily…

                1 Reply Last reply Reply Quote 0
                • K
                  Keyz
                  last edited by

                  for god sakes man dont give him ideas  ::) ::)

                  Thankfully hes not tech savy lol ;D as a new ip could of saved his behind.. but now ive static ip'd him :D

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    Lets hope he doesn't access the console and revert your rules…

                    https://doc.pfsense.org/index.php/Locked_out_of_the_WebGUI

                    Kids are crafty...

                    1 Reply Last reply Reply Quote 0
                    • L
                      LBP
                      last edited by

                      If you ask me, it'd be a good thing if the non-tech savy kid is forced to learn how to spoof a MAC or find another way around your internet ban.

                      1 Reply Last reply Reply Quote 0
                      • K
                        kejianshi
                        last edited by

                        Pfsense can do a really good job of this sort of thing.  However, pfsense does need to be physically secured.  Lets hope the kids don't just go down and keep restoring defaults.

                        1 Reply Last reply Reply Quote 0
                        • R
                          remlei
                          last edited by

                          well you can just make a default rule that any device other than listed on the alias will restrict their internet access after the specified time. It's not really that hard, no mac spoofing can bypass it, but a VPN can easily bypass it but there's no free VPN service out there that offers lag-free gaming so your kid needs to pay for it or you can just blacklist the possible VPN IPs that he uses, until he rans out of option of free VPN. Just dont block port 80, 443 and 53, you dont want your kid interrupted while doing a legitimate school homework overnight.

                          your kid might try to spoof your whitelisted mac addresses though

                          if everything fails, isolate his PC on a entire subnet :P

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.