6. Access Control (Port filtering)

Some folks may need to control which users can access Internet services, or restrict access to only specific things like email and web browsing. For this, most all routers provide some sort of Access Control. It works by having you first create groups of users (you actually make groups of IP addresses). For each group, you select specific Internet services (using their port numbers) that you want to control for that group.

Different routers allow different degrees of control, but you'll usually be able to limit Internet access to a programmed group of services (ports) only, or allow access to all services except a named group. When a user tries to use a filtered service, say AOL Instant Messenger, in most cases the service just won't work. This can be frustrating for the user and prompt unnecessary calls to tech support (or Mom or Dad) if the router administrator hasn't told the users about the filters. A growing number of routers, however, display a message telling the user that their access is being blocked when they trigger a filter.

The average number of port filtering groupings is about four, and the number of ports that can be filtered per grouping varies. Some routers allow you to mix single ports and port ranges in the filter, while others allow only lists of single ports.

In most cases, the filters are either on or off, but some routers allow you to program a schedule for enabling and disabling the filters. The programming allowed is usually not very flexible, usually limited to one time period and the ability to control the days of the week that the time period is used.

Content Control (Content filtering)

Content Controls basically are intended to control which websites your LAN users can access. This feature is similar in function to programs like Cybersitter, NetNanny, CyberPatrol, etc., but is usually much more limited in function. Some products just allow you to enter the URLs or IP addresses of websites and allow you to restrict access to just those sites, or block the sites. Other routers implement list based filtering and allow you to purchase a subscription to a filter list maintained by a third party. You also might or might not get Time of Day controls for the filtering.