SPY on router

Accessing Your Router’s Settings Page

From any computer, access your router’s setup page by typing in its IP address into your browser window. For me, it’s 192.168.1.1.  Try clicking that and see what happens.

If that doesn’t work, open CMD.exe and type ipconfig /all and look for the field that readsdefault gateway.

A Quick Note About Your Default Password

You’ll probably be prompted to enter a username and password. You probably don’t remember what this is. Try admin / password or admin / 1234 or admin / admin  or root / root. You can also Google your router’s model number and “default password.” Once you’ve done that, you should definitely change it. On the NETGEAR page, it’s Maintenance > Set Password

Viewing Your Logs

To get a feel for what we’re working with, go ahead and Click Logs under “Content Filtering.”

Initially, this is going to be a bunch of mumbo jumbo. But don’t worry, we’ll make sense of this. If you can already parse out all this info, then great. If not, read on.

What you want to pay attention to in this screenshot are the IP addresses for the Source. This is how we’ll track who was looking at what. Here, we see that all the activity is coming from 192.168.1.6. That’s my computer. How do we know? See below.

Viewing Attached Devices

Click Attached Devices under “Maintenance” to see.

This lists all the devices that are attached to the router. As you can see, 192.168.1.6 is JACK-WIN7, which is what I named my main computer. PHONEY-BALONEY is my iPhone. HP8D41B1, I’m assuming, is the netbook sitting open on my kitchen table. Or it could be my neighbor stealing my WiFi. At any rate, this is a useful page to remember.

To illustrate, I’ll visit yahoo.com on my iPhone and see if it shows up in the logs:

Now, I’m going to hazard a guess and assume that you don’t want to spend your evenings sifting through the log, matching up IP addresses to salacious websites. Luckily, you can automate it somewhat by blocking sites.

Blocking Sites

Blocking sites and services on your router restricts access to certain websites or activity on certain ports. This is a rock solid way to police web activity because it can’t be circumvented from a computer. You have to access the router to change this.

Click Block Sites under “Content Filtering.” Here, you can enforce restricted websites by punching in keywords to add to your  block list. You can choose to block websites according to a schedule (Click Schedule to choose the times/days of the week to block) or you can choose to block them always.

Notice along the bottom that you can add a trusted IP address. In this case, I don’t want to block myself from these sites, just my untrustworthy kids. Remember that my IP address is 192.168.1.6, so we can punch it in here to give us full access. Note that this presents a potential workaround, as a clever user could find a way to get assigned that IP. Use at your own peril.

Now, when you try to visit a blocked site, you see this:

Note that one may be able to circumvent this kind of filtering by typing in an IP address directly (for example, to get to Facebook, just type 69.63.189.11 into the browser window). To avoid this, add the known IP addresses to your block list.

Tip: If you want to block all Internet access, say, after 9PM, use the Block Services tab and choose HTTP  from the drop down. Then make sure you specify the IP address for the restricted devices.

E-mail and Alerts

Using the E-mail tab, you can have your router email you the logs on a daily/weekly/hourly basis or each time someone tries to access a blocked website.  Or, you can send the logs manually from the Logs page. 

Either way, the email will usually show up in your Spam folder, so be sure you filter it correctly.

What I suggest doing, rather than actively blocking sites, is to set yourself up a Gmail filter that scans your logs for certain keywords and then stars them. This will save you a lot of time sifting through the logs manually and also prevents your suspects from knowing that your monitoring their activity.

With a filter like this, you can get a daily report of your son or daughter’s web activity, as well as a flag each time certain keywords show up. All without them knowing.

Conclusion

Using NETGEAR’s built-in security tools, you can easily monitor all network traffic going into or coming out of your home. The advantage of this is that there isn’t any software installed on your child’s computer, meaning that it’s harder for them to detect and nearly impossible for them to get around. They could use proxy sites, but that’s a pain in the butt and easily picked up on if you look at the logs. The main limitation is that you won’t be able to see any web browsing that’s done on their smartphone or tablet via a cellular data network (e.g. 3G, 4G).

And I want to reiterate that properly educating your kid about safe web browsing activities is the first and most important step to keeping them in the clear on the web. A lot worse can happen to anyone on the web who doesn’t know basic web safety principles. And that goes beyond watching bootlegged episodes of South Park or a risqué CollegeHumor.com video. From viruses and phishing schemes to sexual predators and dangerous misinformation from irresponsible news journalists, there’s a lot out there that can harm your child and your family that can’t be stopped through Big Brother-style monitoring. Your energy is far better spent trying to teach your kid to be a responsible and thoughtful consumer of media.

But if you are ever suspicious that your kid is involved in something way over his or her head, these tools may be able to help you catch it before something disastrous happens.

Okay, enough preaching. Godspeed, you paranoid parent, and happy spying.