Recommend:
To the knowledge base
Knowledge document #3396

Blocking internet use for certain network applications in the FRITZ!Box

The FRITZ!Box parental controls not only allow you to limit internet access time, you can also completely block particular applications (for example, online games) from accessing the internet. You can use access profiles to specify which blocks apply to which devices.

Important:To bypass internet blocks, some applications (for example TeamViewer, Messenger) use the ports used to surf the internet instead, if necessary. Therefore, the FRITZ!Box cannot block only this type of application from using the internet. Instead, block internet access for the respective device or set up a firewall on it.

Requirements / Restrictions

  • You can only block applications that exclusively use the TCP and UDP protocols.
  • Applications cannot be blocked when the FRITZ!Box is used as a Mesh Repeater or in IP client mode. In this case, regulate internet access in the Mesh Master or in your router.

Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.

1 Preparations

  1. Determine which ports and IP protocols the application uses. Refer to the manufacturer for this information, for example consult the manual.

    Note:You can find a non-binding overview of the ports used by many applications at www.portforward.com.

2 Adding a network application

To block particular applications from using the internet, first set up rules in the FRITZ!Box for the ports and protocols used by the application:

  1. Click on 'Internet' in the FRITZ!Box user interface.
  2. Click on 'Filter' in the 'Internet' menu.
  3. Click on the 'Lists' tab.
  4. Click on 'Network Applications' and then on 'Add Network Application'.

    Note:Some applications are preconfigured in the FRITZ!Box. Click the corresponding (Edit) button if you want to customize them.

  5. Enter a name for the application and click on 'Next'.
  6. Select the protocol used by the application to send data to the internet.
  7. If you selected TCP or UDP, click on 'Next', enable the option 'Port Range' for the source port(s) and destination port(s), and enter the port(s) used by the application.
  8. Click on 'Finished' to save the settings.
    Prioritization rules FIFA 2022 (PlayStation)
  9. If the application uses multiple protocols and/or port ranges:
    1. Click on the (Edit) button next to the application.
    2. Click on 'Add Protocol' and repeat steps 6 - 8 for the protocols and port ranges that are missing.

    Example:
    Nine different rules are required to set up the game FIFA 2022 for PlayStation as a network application in the FRITZ!Box (source: Port Forward).

3 Blocking a network application in access profiles

Block the applications in all the access profiles whose internet use you want to regulate:

  1. Click on 'Internet' in the FRITZ!Box user interface.
  2. Click on 'Filter' in the 'Internet' menu.
  3. On the 'Parental Controls' tab, click on the profile you want to configure, then on the (Edit Access Profile) button.
  4. Click on 'Advanced Settings'.
  5. Enable the option 'All network applications are permitted'.
  6. Click on the 'Add Exceptions' button.
  7. Select all the applications you want to block and click on 'Apply'.
  8. Click on 'Apply' to save the access profile.

The application is now blocked. Restart the FRITZ!Box so that the filter also applies to devices that accessed the internet while you were configuring it.

4 Implementing additional security measures

Changing the FRITZ!Box password

To prevent unauthorized persons from logging in to the FRITZ!Box with the password on the underside of the device and changing its settings, configure a new password:

  1. Click on 'System' in the FRITZ!Box user interface.
  2. Click on 'FRITZ!Box Users' in the 'System' menu.
  3. Click on the (Edit) button next to the user for the FRITZ!Box password (for example, 'fritz1234').
  4. Enter an individual password that is strong enough. Do not use a password that you already use for other services, such as an email account, Amazon, Facebook, or Google.

    Tip:Keep the password in a safe place! You must enter the password to access the user interface.

  5. Click on 'Apply' to save the settings.

Adjusting the 'Standard' access profile

To ensure that new devices in the home network cannot bypass the web filters, block the 'Standard' access profile from using the internet:

Note:The 'Standard' profile is valid for all devices in the home network that have not been assigned to a specific access profile, and is automatically assigned to all new devices in the home network.

  1. Click on 'Internet' in the FRITZ!Box user interface.
  2. Click on 'Filter' in the 'Internet' menu.
  3. On the 'Parental Controls' tab, click on the 'Standard' profile, then on the (Edit Access Profile) button.
  4. Enable the option 'Schedule'.
  5. Click on the 'Internet use blocked' button, hold down the mouse button, and drag the mouse across the weekly overview.
    • The weekly overview is now completely white, which means that internet use is blocked at all times.
  6. Click on 'Advanced Settings'.
  7. Enable the option 'Use of guest access blocked'.
  8. Click on 'Apply' to save the access profile.



Related topics:

Language selection