Set up JusProgDNS in the FRITZ!Box
The FRITZ!Box is the most used DSL box in Germany, with which families and also smaller organizations access the Internet. JusProgDNS as a parental control filter is quite easy to install in the Fritzbox without any technical knowledge. Follow our step-by-step instructions below to set up the parental control program of JusProg e.V. in the fritz.box .
Note: If JusProgDNS is installed in the Fritzbox, the child and youth protection works for all devices that access the Internet via the fritz.box – regardless of whether they are connected via WLAN or with network cables. Unfortunately, the profile management included in the Fritzbox does not allow individual name server entries per end device using the box. However, you can easily switch between the default name server settings (no JusProgDNS active) and the JusProgDNS entries by logging into the fritz.box.
Consider what age level is a good compromise for everyone surfing via fritz.box. For example, if you select “16+”, the developmentally dangerous sites will be blocked, but almost all other websites will be freely accessible to all.
Tip: If you do not want an overall protection for all users of the fritz.box with the same age level, then you can install JusProgDNS as a parental control program or the other parental control programs of JusProg e.V. in each individual terminal that your children use … and select the appropriate age level in each case.
Step-by-step instructions for the JusProgDNS Parental Control in the FRITZ!Box.
The settings for JusProgDNS are made in the administration area of the fritz.box. To do this, open the administration area of your DSL box on a computer that is connected to the Internet via the fritz.box. To do this, open a browser (e.g. Firefox or Chrome) and type into the address bar:
fritz.box
and click on “Enter”. Then you will see the login window for the Fritzbox. The Internet address “fritz.box” is the default setting. It is possible that the person who set up the fritz.box for you has changed this setting and the Fritzbox can only be reached via an IP address, for example. Ask the person who set up the box about this.
On the fritz!box settings home page, enter your password for the box as it was assigned when you set up the box:
Important: After logging in, check whether the view is set to “Advanced”. This information is at the bottom of the page, often below the navigation (depending on the fritz.box version). If it says “View: Standard”, then click on the word “Standard” and it will change to “Advanced”. You will then see “View: Advanced”.
If you have set the view to “Advanced”, click on the “Internet” menu item in the fritz.box navigation.
On the page that opens, click the “DNS Server” tab.
Note: If you do not see the “DNS Server” tab, but only the “Internet Access” tab, then you have not set the view to “Advanced”, see above.
Then set the selection to “Use other DNSv4 servers” by clicking on the empty round dot.
Tip: If the selection before your change is not on the above point “Use DNSv4 servers assigned by the Internet provider”, but already on “Other DNSv4”, then clarify with your system administrator whether you may change the name server. To be on the safe side, take a cell phone photo of the previous settings so that you can reset them if necessary.
Enter the IP addresses of the JusProgDNS name server into the empty fields. In the upper row comes the first IP address, in the second row the 2nd IP address. The dots are already between the fields, therefore you need and may enter only the numbers.
Important: Check carefully if all numbers are entered correctly. Even a small mistake will result in you no longer being able to surf the Internet (of course, you can then correct the setting in the fritz.box).
Which IP addresses of JusProgDNS you enter depends on which age level should be valid for your fritz.box by default. In the following listing you open the expander element (click on the plus sign) with the age level you want and take over the two IP addresses shown there. The “1st IP” is in each case the “Preferred DNSv4 Server” for the upper line, the “2nd IP” comes as “Alternative DNSv4 Server” in the lower line.
If name servers for IPv6 are also enabled in your fritz.box, also enter the JusProgDNS name servers in IPv6 format – otherwise your child would surf without protection when the Fritzbox switches to IPv6. The IPv6 nameservers of JusProgDNS are also in the expander element above and are also individual per age level. Also for IPv6 you have to enter two IP addresses. Again, don’t make a typo (better copy-and-paste than copy-and-paste).
When you have entered the IP addresses, click the “Apply” button.
If a name server has never been changed in the fritz.box, the box may want to confirm the change with a security query.
To do this, follow the instructions in the message window and call the specified number using a phone connected via the fritz.box (not your cell phone!) and also dial the * asterisk at the beginning.
Alternatively you can click on the link “Without phone? Confirm with FRITZ!Box button” and press the button shown after clicking on the link on your DSL box.
As soon as the fritz.box has recognized your phone call (or the correct button has been pressed), a final confirmation window will appear. Click on “OK” and JusProgDNS is set up in your Fritzbox.
Test whether the entry of JusProgDNS in your Fritzbox has worked.
Before you let a child surf on the terminal, test as an adult (without your child present) first whether JusProgDNS has been set up correctly and the child filter works.
To test the JusProg parental control program, first call up the website of the children’s search engine www.fragfinn.de to test whether the end device can still surf the Internet. fragFINN is enabled “from 0 years”. Then call up the website of a well-known porn site, for example, and check whether a blocking page is displayed instead of the erotic content.
If the test is successful, you can let your child surf with the terminal. If the test is not successful, please check whether you have completed all entries and steps correctly and, if necessary, consult our FAQ.
Circumvention security?
Settings in FRITZ!Box are protected with the password. Make sure that your child does not have access to the password or cannot guess it, then JusProgDNS is safely installed and your child is well protected.
However, clever youngsters might get the idea to manipulate the name server settings in their own devices, even though they have to be quite familiar with the technology to do so. You can also do something about this “circumvention trick”: Nameservers are usually transmitted via a special protocol (this is, so to speak, the data format of Internet transmission) and a certain port (this is a kind of classification of data paths): UDP with port 53. You can block this port in the FRITZ!Box. This is even possible via “profiles” and thus, if desired, only for certain end devices that are connected to the FRITZ!Box.
Circumvention security – Block port 53 UDP
Follow this step-by-step guide to prevent your smart and tech-savvy child from making name server queries over “Port 53 UDP” in their own end device and thus bypass JusProgDNS in FRITZ!Box.
First log into the administration area of your Fritz.Box (how to do this is described above in the instructions for setting up JusProgDNS). Then click in the menu on “Internet” and then “Filter”.
Then click on the “Lists” tab. Tip: If the tab is not displayed, you have not activated the “Advanced View”, this goes under the navigation (details see above).
Scroll down to the “Network Applications” section…
…and click the “Add network applications” button
Give the new entry any name (e.g. “JusProgDNS53”) and then click the “New Protocol” button.
In the settings for the new protocol, first select “UDP”.
and then enter the source port “53”.
Do not make an entry for the “Destination port”.
Confirm the entries by clicking on “OK”.
