NETGEAR KWGR614 - 54 Mbps Wireless Router User manual

3-1
v1.3, October 2006
Chapter 3
Content Filtering
This chapter describes how to use the content filtering features of the 54Mbps Wireless Router
Model KWGR614 to protect your network. These features can be found by clicking on the Content
Filtering heading in the Main Menu of the browser interface.
Content Filtering Overview
The 54Mbps Wireless Router Model KWGR614 provides you with Web content filtering options,
plus browsing activity reporting and instant alerts via e-mail. Parents and network administrators
can establish restricted access policies based on time of day, Web addresses and Web address
keywords. You can also block Internet access by applications and services, such as chat or games.
To configure these features of your router, click on the subheadings under the Content Filtering
heading in the Main Menu of the browser interface at http://www.routerlogin.net. The subheadings
are described below:

54Mbps Wireless Router Model KWGR614 Reference Manual
3-2 Content Filtering
v1.3, October 2006
Blocking Access to Internet Sites
The 54Mpbs Wireless Router allows you to restrict access based on Web addresses and Web
address keywords. Up to 255 entries are supported in the Keyword list. The Block Sites menu is
shown in Figure 3-1 below:
To enable keyword blocking:
1. Select either “Per Schedule” or “Always”
2. Click Apply.
3. If you want to block by schedule, be sure to specify a time period in the Schedule menu, as
described in “Scheduling When Blocking Will Be Enforced” on page 3-6.
Figure 3-1

54Mbps Wireless Router Model KWGR614 Reference Manual
Content Filtering 3-3
v1.3, October 2006
To add a keyword or domain, type it in the Keyword box, click Add Keyword, then click Apply.
To delete a keyword or domain, select it from the list, click Delete Keyword, then click Apply.
Keyword application examples:
• If the keyword “XXX” is specified, the URL <http://www.badstuff.com/xxx.html> is blocked.
• If the keyword “.com” is specified, only Web sites with other domain suffixes (such as .edu or
.gov) can be viewed.
• If you wish to block all Internet browsing access during a scheduled period, enter the keyword
“.” and set the schedule in the Schedule menu.
To specify a Trusted User:
1. Enter that computer’s IP address in the Trusted User box.
2. Click Apply.
You may specify one Trusted User, which is a computer that will be exempt from blocking and
logging. Since the Trusted User will be identified by an IP address, you should configure that
computer with a fixed IP address.
Blocking Access to Internet Services
The 54Mpbs Wireless Router allows you to block the use of certain Internet services by computers
on your network. This is called service blocking or port filtering. The Block Services menu is
shown below:
Figure 3-2

54Mbps Wireless Router Model KWGR614 Reference Manual
3-4 Content Filtering
v1.3, October 2006
Services are functions performed by server computers at the request of client computers. For
example, Web servers serve Web pages, time servers serve time and date information, and game
hosts serve data about other players’ moves. When a computer on your network sends a request for
service to a server computer on the Internet, the requested service is identified by a service or port
number. This number appears as the destination port number in the transmitted IP packets. For
example, a packet that is sent with destination port number 80 is an HTTP (Web server) request.
To enable service blocking:
1. Select either Per Schedule or Always
2. Click Apply.
3. If you want to block by schedule, be sure to specify a time period in the Schedule menu, as
described in “Scheduling When Blocking Will Be Enforced” on page 3-6.
To specify a service for blocking:
1. Click Add. The Add Services menu will appear, as shown below:
2. From the Service Type list, select the application or service to be allowed or blocked. The list
already displays several common services, but you are not limited to these choices. To add any
additional services or applications that do not already appear, select “User Defined”.
Figure 3-3

54Mbps Wireless Router Model KWGR614 Reference Manual
Content Filtering 3-5
v1.3, October 2006
Configuring a User Defined Service
To define a service, first you must determine which port number or range of numbers is used by
the application. The service numbers for many common protocols are defined by the Internet
Engineering Task Force (IETF) and published in RFC1700, “Assigned Numbers.” Service
numbers for other applications are typically chosen from the range 1024 to 65535 by the authors of
the application. This information can usually be determined by contacting the publisher of the
application or from user groups of newsgroups.
1. Enter the Starting Port and Ending Port numbers. If the application uses a single port number,
enter that number in both boxes.
2. If you know that the application uses either TCP or UDP, select the appropriate protocol. If
you are not sure, select Both.
Configuring Service Blocking by IP Address Range
Under “Filter Services For”, you can block the specified service for a single computer, a range of
computers (having consecutive IP addresses), or all computers on your network.

54Mbps Wireless Router Model KWGR614 Reference Manual
3-6 Content Filtering
v1.3, October 2006
Scheduling When Blocking Will Be Enforced
The 54Mpbs Wireless Router allows you to specify when blocking will be enforced. The Schedule
menu is shown below:
Use this schedule for blocking content. Check this box if you wish to enable a schedule for
Content Filtering.
• Days to Block. Select days to block by checking the appropriate boxes. Select “Every day” to
check the boxes for all days.
• Time of Day to Block. Select a start and end time in 23:59 format. Select “All Day” for 24
hour blocking.
• Click Apply to make the schedule take effect.
Be sure to select your Time Zone in the E-Mail menu; see “Configuring E-Mail Alert and Web
Access Log Notifications” on page 3-9 for details.
Figure 3-4

54Mbps Wireless Router Model KWGR614 Reference Manual
Content Filtering 3-7
v1.3, October 2006
Viewing Logs of Web Access or Attempted Web Access
The log is a detailed record of what Web sites you have accessed or attempted to access. Up to 128
entries are stored in the log. Log entries will only appear when keyword blocking is enabled, and
no log entries will be made for the Trusted User. An example is shown below:
Log entries are described in Table 3-1.
Figure 3-5
Table 3-1. Log entry descriptions
Field Description
Date and Time The date and time the log entry was recorded.
Source IP The IP address of the initiating device for this log entry.
Action This field displays whether the access was blocked or allowed.
Target URL The name or IP address of the Web site or newsgroup visited or
attempted to access.

54Mbps Wireless Router Model KWGR614 Reference Manual
3-8 Content Filtering
v1.3, October 2006
Log action buttons are described in Table 3-2.
Table 3-2. Log action buttons
Field Description
Refresh Click this button to refresh the log screen.
Clear Log Click this button to clear the log entries.
Send Log Click this button to E-mail the log immediately.

54Mbps Wireless Router Model KWGR614 Reference Manual
Content Filtering 3-9
v1.3, October 2006
Configuring E-Mail Alert and Web Access Log Notifications
In order to receive logs and alerts by E-mail, you must provide your E-mail information in the E-
Mail menu, shown below:
•Turn E-mail Notification On—Check this box if you wish to receive e-mail logs and alerts
from the router.
Figure 3-6

54Mbps Wireless Router Model KWGR614 Reference Manual
3-10 Content Filtering
v1.3, October 2006
•Your Outgoing Mail Server—Enter the name of your outgoing (SMTP) mail server (such as
mail.myISP.com). You may be able to find this information in the configuration menu of your
e-mail program. If you leave this box blank, log and alert messages will not be sent via e-mail.
•Send To This E-mail Address—Enter the e-mail address to which logs and alerts are sent.
This e-mail address will also be used as the From address. If you leave this box blank, log and
alert messages will not be sent via e-mail.
•Authentication—Leave the “Authenticate with SMTP Server” box unchecked if you use an
outgoing mail server provided by your current ISP. If you use an e-mail account that is not
provided by your ISP, check this box and enter the required user name and password
information.
You can specify that logs are automatically sent to the specified e-mail address with these options:
•Send Alert Immediately—Check this box if you would like immediate notification of
attempted access to a blocked site.
•Send Logs According To This Schedule—Use this option to specify how often to send the
logs: Hourly, Daily, Weekly, or When Full.
– Day. Specifies which day of the week to send the log. Relevant when the log is sent
weekly or daily.
– Time. Specifies the time of day to send the log. Relevant when the log is sent daily or
weekly.
If the Weekly, Daily or Hourly option is selected and the log fills up before the specified
period, the log is automatically e-mailed to the specified e-mail address. After the log is sent,
the log is cleared from the router’s memory. If the router cannot e-mail the log file, the log
buffer may fill up. In this case, the router overwrites the log and discards its contents.
The 54Mpbs Wireless Router uses the Network Time Protocol (NTP) to obtain the current time
and date from one of several Network Time Servers on the Internet. In order to localize the time
for your log entries, you must specify your Time Zone:
•Time Zone—Select your local time zone. This setting will be used for the blocking schedule
and for time-stamping log entries.
•Daylight Savings Time—Check this box if your time zone is currently under daylight savings
time.