Set up JusProgDNS in network routers
In schools, libraries and other organizations, access to the Internet is usually realized with one or more routers.
In many cases, there are separate routers for the administrative area (teachers and administration) on the one hand and for the classrooms and network accesses of the students on the other. Other publicly accessible Internet terminals, Internet cafés and public WLAN access points also have a similar network architecture.
The central access to the Internet used by minors via WLAN or LAN cable can be set up as a secure surfing area with a simple DNS entry in the router. The age levels from 0 (only fragFINN list), from 6 years, from 12 years and from 16 years (only the “adult sites” are blocked) are available.
Tip: If you do not want an overall protection for all users of the router with the same age level, then you can install JusProgDNS as a parental control program or the other parental control programs of JusProg e.V. in each individual end device that the minors use … and select the appropriate age level in each case.
General information about the installation of JusProgDNS in network routers.
Every network router offers the possibility to specifically configure a DNS server (name server) instead of the default configuration or the name server of the Internet provider. In this case, domain names called up by users are translated into IP addresses by the desired name server. Data traffic on the Internet runs on IP addresses, not on clear domain names.
JusProgDNS uses this feature to create safe surfing spaces as a network-based parental control program for minors. JusProg’s name server usually responds with the actual IP addresses to a domain like any other name server. However, if the web page behind the domain is relevant to the protection of minors, a “false IP address” is reported to the router, the invocation of which ultimately leads to the blocking of the developmentally harmful web page with the display of a bocking infopage, or to termination in the case of encrypted web pages.
Setting up the secured surfing space via network router is therefore very simple. You enter the IP addresses as DNS into the router and the protection is already installed. There are two IP addresses (primary and secondary for higher fail-safety) available for each age level. Please refer to this box for the IP addresses belonging to the desired age level:
Provided your network is IPv6, use the IPv6 provided by JusProgDNS, which is also in the box.
IMPORTANT: Register with JusProgDNS
For reasons of abuse protection and higher security, the registration-free possible name server queries per IP address are limited to the usual quota in private households. Schools, kindergartens and all other organizations with multiple users, however, should and must register with JusProgDNS.
Then store their static IP address in your JusProgDNS settings so that the queries can be assigned to their account.
If your usage quota as a registered user is not sufficient despite correct specification of your organization type, please contact us. You may then have to prove the status of your organization so that we can increase your usage quota.
For larger networks (schools, NGOs) we offer JusPrg DNS at cost price to cover our server costs.
Setup of JusProgDNS in the network router
How DNS entries are changed in the network router and thus specific name servers (in this case the JusProgDNS name servers) are addressed, is realized differently by each router manufacturer.
Please refer to the manual of your router manufacturer how to change DNS entries or ask the search engine of your confidence.
With some configurations you set up the JusProgDNS centrally in the router or another network component and enter its internal IP in turn in the end devices (clients) as a name server. This allows flexible changes and can also be used as bypass protection, if other name server calls (port 53) are prevented.
Circumvention security?
Since access to your router and other network components is certainly password-protected, clever youngsters cannot bypass the secure surfing room by changing the configuration.
Usually, publicly accessible end devices in the administration of your school or organization are secured against configurations by underage users anyway (no admin rights), so this circumvention route should also be prevented.
However, if children and young people have access to end devices that they can administer themselves (e.g. their own smartphones and tablets in the school WLAN), it depends on your network configuration whether their own DNS entries in the end devices can “override” the router entry with JusProgDNS and thus circumvent the secure surfing space. In this case, check whether you can suppress unauthorized name server queries via your network (port 53) to increase the bypass security.
Set up JusProgDNS in Cisco Router
The following web pages will provide you with information on how to set up JusProgDNS as a parental control program in Cisco routers:
“Configuring DNS on Cisco Routers” (engl.)
https://www.cisco.com/c/en/us/support/docs/ip/domain-name-system-dns/24182-reversedns.html
“How to configure DNS server on a Cisco router” (engl.)
https://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/257-cisco-router-dns-server.html
Do you have experience with DNS records? Help others
You have successfully set up JusProgDNS in your network? Then show other network administrators how it works with your router type and network configuration. We are happy to post step-by-step instructions online. Especially useful are screenshots in the style of the other tutorials under this menu item, but also comprehensible textual explanations. Please feel free to contact us. Thank you very much!
Test if the entry of JusProgDNS into your router worked out
Before letting a minor surf on a terminal that uses your router with safe surfing space, first test as an adult (without a student present) whether JusProgDNS has been set up correctly and the parental control filter is working.
To test the JusProg parental control program, first call up the website of the children’s search engine www.fragfinn.de to test whether the end device can still surf the Internet. fragFINN is enabled “from 0 years”. Then call up the website of a well-known porn site, for example, and check whether a blocking page is displayed instead of the erotic content. For https calls, no blocking page is displayed, but the connection is terminated.
If the test is successful, you can let children and teenagers surf through your router. If the test is not successful, please check whether you have completed all entries and steps correctly and, if necessary, consult our FAQ.