How can family sysadmins make a safe internet playground for kids?

Confab Internet access isn't about PCs any more, and keeping an eye on one's children is tough for even the most techno-literate parent despite the plethora of tools available.

It's not puritanical to want to control what one's offspring see and hear – there are things on the internet with the power to scar an adult – and while no one wants to stop the exploration of natural curiosity, a six-year-old experiencing Sonic the Hedgehog rape fantasies is best avoided.

But traditional parental controls are largely restricted to desktop computers while children are using all sorts of devices. It's constantly surprising how many parents are relying on PC-based filtering, while their children are upstairs eating though YouTube's finest on an iPod touch.

What's behind their closed bedroom doors?

Image via Shutterstock

The days when parental control was just a matter of putting the PC in the hallway are well past. Although we'd all love to sit with our children the whole time they're using the internet, that's just not practical once one has more than a two or three of the blighters. Not to mention there's a limit to how many times an adult can watch Dr Strangeglove's singing before the brain starts to melt.

Some device-specific software is available; Vodafone's Guardian Android app will limit access to specific applications and calls to certain numbers, but does little to prevent the kids watching the aforementioned Sonic abomination.

In the UK mobile operators will block access to all but the tamest of pornography, until the user has demonstrated their maturity by wielding a credit card, but most data access will be over Wi-Fi connections where one can't rely on the operator's prudishness.

Some routers offer parental controls built in, and that's certainly a sensible place to put controls of this type. Basic filtering by category is available on most modern routers, and more advanced blocking may be possible depending on router capabilities and how much you're willing spend on a filtering service.

Filtering by URL is standard - more intelligent control needs paying for

Another approach is to use an alternative DNS provider, such as OpenDNS, rather than your ISP's name servers. The Domain Name System turns the textual web address of a site (like theregister.com) into an IP address (like 50.57.15.204) to which a page request can be sent. An alternative DNS server can be configured to only look-up sites that match selected criteria, a service that OpenDNS provides for free (or $20 annually for their advertising-free premium service).

The great thing about using DNS is that one can configure specific machines to use the ISP's default DNS in the normal way, bypassing the filter, should one wish to access inappropriate sites for the sake of research or similar. One imagines that once the children can configure their own DNS then they're probably old enough to cope with the consequences.

OpenDNS offers predefined options, but personal preferences are easy to express