Filtering "Mindcraft" from websites like YouTube



  • Is there any way, through pfSense, to filter YouTube (or all http/https) and block any page with "Minecraft" on the page?

    This is just a home network. We're starting to have some issues with one child and Minecraft videos. Nothing that's to bad yet but I'd like to simply filter out pretty much anything Minecraft related but specifically the damn videos. I know I'm reaching but figured I'd ask…



  • force google and youtube safe search?



  • Talking to children goes a long way compared to filtering content.

    Unless you want it to be an educational exercise how to circumvent filtering proxies ;)



  • I talk to my children, volunteer at their school, in their classes, ride motocross, hike, camp, take martial arts and travel internationally together. Most kids would hate this but mine love it. We're an extremely close family and we all take interest in each others interests. Aside from this there hasn't been any other issues and his school work continues to be stellar. For whatever reason however he has become infatuated with the damn videos as of late. I'd rather not fully block YouTube due to everyone else or password protect the tablets but if that's what it takes so be it.

    Our kids have pretty much free range on almost all the home PC, laptops, online TVs, tablets, etc. Most do not have any account profiles because everyone uses them for online content and not email, etc.

    I was just in hopes there was some way to filter based on word content (ie Minecraft) for https (YouTube) and block all pages. Its only temporary to break the cycle and get his mind and free time focused elsewhere for about 6 weeks.



  • @GruensFroeschli:

    Talking to children goes a long way compared to filtering content.

    Unless you want it to be an educational exercise how to circumvent filtering proxies ;)

    If the world works by just talking/trusting that people do as they are told  we do not need prisons,police and firewalls  ;). As for OP you can't block by keywords  and to filther sites right now with pfsense your best way is to poind your dns to opendns and block categories there



  • You need professional gateway management system like Panabit.It is widely used in companies to block certain applications or domains.I'm pretty sure it can filter certain key words though I do not use it.



  • This is why I use Untangle in addition to pfSense. The content filter on Untangle is very flexible (although I've never tried doing exactly what you are asking, I can think of a few ways I would try it). It is not free for home users, but is pretty cheap - I think $60/yr.

    I use pfSense as my external firewall and router, and use Untangle in bridge mode between pfSense and my network. For my home network I strongly wanted/believed in SSL inspection so that I could categorize and filter content for my kids, and Untangle does that very well. With everything going SSL, if you want visbility and control of content to/in an SSL website, you have to MitM decrypt it…



  • @JasonJoel:

    This is why I use Untangle in addition to pfSense. The content filter on Untangle is very flexible (although I've never tried doing exactly what you are asking, I can think of a few ways I would try it). It is not free for home users, but is pretty cheap - I think $60/yr.

    I use pfSense as my external firewall and router, and use Untangle in bridge mode between pfSense and my network. For my home network I strongly wanted/believed in SSL inspection so that I could categorize and filter content for my kids, and Untangle does that very well. With everything going SSL, if you want visbility and control of content to/in an SSL website, you have to MitM decrypt it…

    Why do you use pfsense as firewall if you paid for the untangle 50/year home license?  with untangle you do not need pfsense in the mix anymore,  Its bandwidth control is far better then traffic shaping in pfsense, it does vlans  great and more. Since I paid the 50/year license I really can't  find a reason to use pfsense


  • Netgate Administrator

    You can block by keywords in the URL using Squidguard but that doesn't help much in a world of URL shorteners etc. Youtube links especially.

    As others have said though there's no way to block pages with keywords in the content. Currently at least.

    Steve



  • @Chrismallia:

    @JasonJoel:

    This is why I use Untangle in addition to pfSense. The content filter on Untangle is very flexible (although I've never tried doing exactly what you are asking, I can think of a few ways I would try it). It is not free for home users, but is pretty cheap - I think $60/yr.

    I use pfSense as my external firewall and router, and use Untangle in bridge mode between pfSense and my network. For my home network I strongly wanted/believed in SSL inspection so that I could categorize and filter content for my kids, and Untangle does that very well. With everything going SSL, if you want visbility and control of content to/in an SSL website, you have to MitM decrypt it…

    Why do you use pfsense as firewall if you paid for the untangle 50/year home license?  with untangle you do not need pfsense in the mix anymore,  Its bandwidth control is far better then traffic shaping in pfsense, it does vlans  great and more. Since I paid the 50/year license I really can't  find a reason to use pfsense

    I don't like Untangle's firewall rule building (firewall rules, input filters, bypass filters, etc), and UPNP does not work right yet (which I need for multiple game consoles to work 100% correctly). If/when they fix UPNP, I may go back to using Untangle as my perimeter firewall/router, but until then pfSense works perfectly for that.



  • Not being an expert… but what about snort with a content rule?
    Dont know how to do it, but would this be possible?



  • @JasonJoel:

    @Chrismallia:

    @JasonJoel:

    This is why I use Untangle in addition to pfSense. The content filter on Untangle is very flexible (although I've never tried doing exactly what you are asking, I can think of a few ways I would try it). It is not free for home users, but is pretty cheap - I think $60/yr.

    I use pfSense as my external firewall and router, and use Untangle in bridge mode between pfSense and my network. For my home network I strongly wanted/believed in SSL inspection so that I could categorize and filter content for my kids, and Untangle does that very well. With everything going SSL, if you want visbility and control of content to/in an SSL website, you have to MitM decrypt it…

    Why do you use pfsense as firewall if you paid for the untangle 50/year home license?  with untangle you do not need pfsense in the mix anymore,  Its bandwidth control is far better then traffic shaping in pfsense, it does vlans  great and more. Since I paid the 50/year license I really can't  find a reason to use pfsense

    I don't like Untangle's firewall rule building (firewall rules, input filters, bypass filters, etc), and UPNP does not work right yet (which I need for multiple game consoles to work 100% correctly). If/when they fix UPNP, I may go back to using Untangle as my perimeter firewall/router, but until then pfSense works perfectly for that.

    Hi Just to let you know I ended up using pfsense again as I was getting complaints that the network is slower and live streams buffering with UT. As soon as I put Pfsense back in everything looks normal again . Do not know if you will have same issues  but for my Network Pfsense is much faster



  • Ohh, you're issue is "slow internet" not "I need to block something". I would recommend talking about the problem you're trying to solve, not a symptom or what you think is a bandaid fix. Kind of like someone going to a professional and asking how you install NOS into your car, but you fail to mention you just want better gas mileage.

    How much bandwidth do you have? This will help determine how aggressive of any approach you'll need.


  • Netgate Administrator

    Ah, yes if you're just doing this because the incessant  Mindcraft videos are using all the available bandwidth for the whole family then there are other options.
    Limiters setup for bandwidth sharing for example. Or just set a low bandwidth Limiter for that one client, force Youtube to low definition.

    Steve



  • Hey.. Just wanted to say thanks for the replies. What I did was nothing to our network. I did gather up all the devices and for the short term I added a password to everything that didn't. I put time and hour management on his bedroom PC for his homework and anything more he needs to ask me to authorize the extra time. I also got rid of any Minecraft books and action figures he had. This takes care of the immediate access he had.

    Additionally, this is his 3rd year riding a motorbike and since he was outgrowing the Yamaha TTR50 we purchased a larger TTR110 for him. Yeah he is spoiled but its not like that… much anyways.  ::) The only way he gets to ride and do martial arts, etc is if his daily chores get done and his school work remains good, which it has! What the new bike does is rejuvenates his enjoyment and takes the focus from Minecraft back to something else. Its been 3 weeks now and this past week I've heard him mention Minecraft once in the last 7 or 8 days. Another 3 to 4 weeks and the habit of Minecraft should be pretty much gone.

    This past weekend we started working on his very own jump and obstacle course in the backyard as well allowing him to work on new skills more often then just one the weekends. Different methods of distraction while keeping his mind and body going.  ;D