Introduction

This page will be updated as I put together a comprehensive list of resources and things to know regarding network filtering.

Pure Network Filters

  1. OPNSense | This is a great firewall (though you will need to experiment with it quite a bit). 
    • If you are really considering taking your network security seriously and want to shield those within your household from unwanted content, this is a good option for those who are somewhat tech-savvy.
    • A possible approach to preventing any form of network bypasses would be to have everything that isn’t on the whitelist blacklisted (thus blocked from reaching).
      • This method would be the most most time consuming and would lead you to needing to constantly whitelist approved sites. This method may in fact be the only method necessary to prevent the consumption of pornography on your home network. Just realize that cellular data, public wifi, and hotspots will completely void the usefulness of pure network filters.

Client-side Filtering Programs

  1. Covenant Eyes | This program is probably your best bet for preventing the consumption of filthy material in general.
    • This software not only blocks unwated online content but also allows someone else to see your browsing habits and gets to see what you are up to.

Adblockers

  1. uBlock Origin | This is the best ad blocker you can get.
    • Ad blockers don’t just improve your browsing experience, but they also help prevent you from seeing unwanted content such as pornography along with getting infected with malware.

Web Browsers

  1. Librewolf | This is a hardened version of Firefox.
    • This web browser has the uBlock Origin extension preinstalled and has sane default settings (which most web browsers fail in, e.g., no advertisements).

Ways Content Filters are Bypassed

  1. Web Browser Proxies
    • DogeUnblocker, Rammerhead, etc… These web proxies bypass 100% of network filters, assuming the URL or IP on which they are being accessed isn’t blocked.
    • Links to these proxies are vastly abundant on the internet. There are communities that provide these links in the thousands, many of which the domains are disguised to look like legitimate sites (e.g., mathisfun.com). For a network observer, it would be impossible for someone to be able to block all of these, unless your network filter being used blacklisted all IP addresses and domains and only whitelisted the approved ones.