Help with YouTube block on selected devices

[stuffu]

I read into the alias part https://docs.opnsense.org/manual/aliases.html but I don't understand how to assign specific IP:s to the alias.

I have two devices with static IP addresses and I want to block YouTube on those devices.

Can someone explain how to achieve that? My kids watch YouTube for approx 36 hours/day... 

[Saarbremer]

Hi,

that's not what firewall rules are made for.

You may need an application firewall for HTTPS (also called web proxy) or just block DNS (may be tricky, too) or go with this: https://www.zenarmor.com/docs/network-security-tutorials/how-to-block-youtube-on-opnsense

[stuffu]

Thanks, but my router can’t handle Zenarmor unfortunately. I can’t find the post now, I’m pretty sure I read a post a while back someone blocked YouTube and subdomains using a rule. I could be wrong but any advice appreciated!

[cookiemonster]

Try AdGuardHome plugin. Light on resources. Has an option to block youtube.
Or try a domain override in Unbound.
A service like AdGuardH is better suited as it has worked out the subdomains and all that jazz that is harder on ip addresses only.

[stuffu]

I have thought of AdGuard but I don't think you can limit access on device level?

[Seimus]

Not sure about AdGuard but,

On Pihole you can create groups per devices and block specific domain for a specific group/device. I am doing it home to prevent access to certain contented for certain VLANs.

Regards,
S.

[cookiemonster]

I don't use this particular functionality of AdG but the section for identifiying clients read:
"Identifier:
Clients can be identified by their IP address, CIDR, MAC address, or ClientID (can be used for DoT/DoH/DoQ). Learn more about how to identify clients https://github.com/AdguardTeam/AdGuardHome/wiki/Clients#clientid."
Then the blocks and filter can be applied per client as well.
Seems worth a try.

[senseuser]

Everything is blocked perfectly in AdGuard Home. You can set different locks for different clients.

[stuffu]

Thanks! Will look into it!

[stuffu]

Everything is blocked perfectly in AdGuard Home. You can set different locks for different clients.

Had only seen the global settings before, this did the trick! Big thanks!