Home Network Question...keeping unauthorized devices from connecting

quote:

---

I have been blocking unknown MAC addresses, but I'd rather whitelist his and have the router automatically block all others...is this possible?

---

Yes. Should be able to google your router model online and find the steps.

Your router should have options for whitelist or blacklist as most do but from a cybersecurity standpoint, leaking your password is not a good practice. Anyone can get your kid’s MAC.
Perhaps it would be better to set up a restricted guest network with QOS for parental or bandwidth controls. What if the friend has a mobile device? All this really depends on what you’re trying to allow or block specifically.

quote:

---

Time to change the network password and not tell the son what it is.

---

That's done already! When he comes back home, there's a learning curve for him.

if you are talking wifi, the only somewhat sure method is just regularly changing the wifi password. MAC addresses can easily be spoof'd.

Having said that, you should have an isolated guest network that anyone can connect to and nobody on that network can talk to the rest of your network. Then it doesn't matter.

quote:

---

quote:
Time to change the network password and not tell the son what it is.



That's done already! When he comes back home, there's a learning curve for him.

---

You're better off going with a whitelist for approved devices. On Windows computers, it's trivial to view a WiFi password even if you enter the new password yourself on his computer and don't tell him what it is.

In a command prompt, as administrator:

quote:

---

netsh wlan show profile name= "Wi-Fi name" key=clear

---

Where "Wi-Fi name" is your SSID. Enter that command and you can see the password.

As others have mentioned, create a guest nework as well. The guest computers can't see your main network.

Make sure those big bad kids can’t get to your Alexa lights or Sonos equipment. The horror.

I am not sure what you are really worried about with segmenting guest and regular Wi-Fi at your house.

quote:

---

cloudlflares family dna blocking

---

This is free, OP. Explanation here.

quote:

---

Malware Blocking Only

Primary DNS: 1.1.1.2

Secondary DNS: 1.0.0.2

Malware and Adult Content

Primary DNS: 1.1.1.3

Secondary DNS: 1.0.0.3

For IPv6 use:

Malware Blocking Only

Primary DNS: 2606:4700:4700::1112

Secondary DNS: 2606:4700:4700::1002

Malware and Adult Content

Primary DNS: 2606:4700:4700::1113

Secondary DNS: 2606:4700:4700::1003

---

quote:

---

Alexa lights or Sonos equipment. The horror

---

Yeah, they're all cloning MAC addresses at 12, but wouldn't have any idea how to set an alarm on either of those apps to turn on all the lights at 0300 accompanied by Celine Dion at full blast.

Maybe they think it'll be fun to delete all your locally archived music/videos off of your local network when they find them. While you're at it, whatever would they do with the tax returns you leave sitting on your desk?

quote:

---

If it wasn't for assholes like you (with the unlocked foot locker), there wouldn't be any thievery in this world

---

-Gunny Hartmann

quote:

---

as my kids can't be bothered to remember even if I told them.

---