Adult content filter does not seem to work

General
1

I’ve got some issues with the “Adult Content” application filter. It did initially work under the “Wired” tab. Then it suddenly stopped working. After removing and adding the application it started working again.

Today I received my AP 6 Pro and I’ve come to understand that the Wired tab no longer applies to my wifi devices like it used to when using a third party access point.

I’ve made a wireless filter and applied the “Adult Content” and “Youtube” applications and applied it to the “Wifi passwords”. Youtube is being blocked as expected. And URL’s added to the “Block Hosts” section works. But adult content is not being blocked.

Edit: For some reason it seems to be working now, after having applied it to two filters. I managed to consolidate them back into one and it’s still working. Even started working at the wired tab after reapplying it again. Consider me confused.

2

Today one of my entries under “Block Hosts” is not being blocked for wired devices.

The top two entries are blocked, but Reddit is not being blocked. I’ve tried adding another entry with www. in front. I’ve tried moving it to the top. Still won’t be blocked.

Wired:

979×456 20.7 KB

It works fine for wireless devices.

Wireless:

498×362 9.22 KB

3

Works for me… Make sure your testing methods don’t fall prey to something like browser cache / etc …
In other words try in Incognito mode.

image
image553×183 6.05 KB

4

Incognito did not work. Cleared cache and flushed DNS. Works now.

Did a quick test and connected to a VPN to access Reddit and an adult site. When disconnecting, Reddit still loads while the adult site is being blocked. Local cache likely explains why the Reddit entry wasn’t being blocked.

Is the DPI engine highjacking DNS queries to block hosts? I’m not using the gateway as a DNS server.

5

Just had a similar issue, just the other way around. A website was intermittently blocked due to an unrelated entry under “Block Hosts”. I reached out to support and was given an explanation:

For custom blocklists, those domains are looked up periodically and the resolved IP addresses added to a block list

I think the reason that it is sometimes working is that CDN* is rotating IP addresses, so depending on when the lookup is done, it may or may not overlap with the XY* block

*anonymised the CDN and host in question as they are not really relevant to the underlying issue.

Edit: I realize this is mostly user error and lack of networking experience/knowledge. I should have connected the dots by the fact that the block hosts filter works without using the Route10 as DNS server.