MikroTik
MikroTik Parental Controls Blocking Websites and Managing Screen Time
Complete guide to setting up parental controls on MikroTik routers. Learn how to block inappropriate websites, limit screen time, and manage internet access for kids.
Raza RehmanNovember 22, 2025
5 min read
489 views
Introduction: Why Parental Controls Matter
In today's digital age, protecting children from inappropriate online content and managing their screen time has become essential. MikroTik routers offer robust parental control features that go beyond basic website blocking, giving you complete control over your family's internet usage.
What You'll Achieve:
- Content Filtering: Block inappropriate websites and content
- Time Management: Set internet access schedules
- Usage Monitoring: Track online activity
- Safe Browsing: Protect against malicious sites
- Bandwidth Control: Limit download/upload speeds
Method 1: Using MikroTik Kid Control
Enable Kid Control Feature
# Enable Kid Control
/iot kid-control set enabled=yes
# Add devices for monitoring
/iot kid-control device add mac-address=AA:BB:CC:DD:EE:FF name="Johns-Phone" policy=strict
/iot kid-control device add mac-address=11:22:33:44:55:66 name="Sarahs-Tablet" policy=moderate
Create Access Policies
# Strict policy for young children
/iot kid-control policy add name=strict allowed-url-list=whitelist blocked-url-list=blacklist schedule=homework-hours
# Moderate policy for teenagers
/iot kid-control policy add name=moderate blocked-url-list=social-media schedule=weekend-hours
Define Access Schedules
# Homework hours (4 PM - 8 PM weekdays)
/iot kid-control schedule add name=homework-hours sun=0 mon=16:00-20:00 tue=16:00-20:00 wed=16:00-20:00 thu=16:00-20:00 fri=16:00-20:00 sat=0
# Weekend hours (10 AM - 9 PM)
/iot kid-control schedule add name=weekend-hours sun=10:00-21:00 mon=0 tue=0 wed=0 thu=0 fri=0 sat=10:00-21:00
Method 2: Advanced Firewall Filtering
Block Specific Websites
# Create address list for blocked sites
/ip firewall address-list add list=blocked-sites address=facebook.com
/ip firewall address-list add list=blocked-sites address=twitter.com
/ip firewall address-list add list=blocked-sites address=tiktok.com
/ip firewall address-list add list=blocked-sites address=instagram.com
/ip firewall address-list add list=blocked-sites address=snapchat.com
# Block social media during study hours
/ip firewall filter add chain=forward src-address=192.168.88.50 dst-address-list=blocked-sites time=16:00-20:00 action=drop comment="Block social media during homework"
Block Adult Content
# Block common adult content categories
/ip firewall address-list add list=adult-sites address=.porn
/ip firewall address-list add list=adult-sites address=.xxx
/ip firewall address-list add list=adult-sites address=.adult
/ip firewall address-list add list=adult-sites address=.sex
# Always block adult content
/ip firewall filter add chain=forward dst-address-list=adult-sites action=drop comment="Block adult content"
Method 3: DNS-Based Filtering
Use Family-Friendly DNS
# Set up OpenDNS FamilyShield
/ip dns set servers=208.67.222.123,208.67.220.123 allow-remote-requests=yes
# Or use CleanBrowsing DNS
/ip dns set servers=185.228.168.168,185.228.169.168 allow-remote-requests=yes
Block DNS Requests to Unwanted Sites
# Block specific DNS queries
/ip firewall filter add chain=forward protocol=udp dst-port=53 dst-address-list=blocked-dns action=drop comment="Block DNS for unwanted sites"
/ip firewall address-list add list=blocked-dns address=8.8.8.8
/ip firewall address-list add list=blocked-dns address=1.1.1.1
Time-Based Access Control
Create Time Schedules
# Bedtime schedule (9 PM - 7 AM)
/ip firewall filter add chain=forward src-address=192.168.88.50 time=21:00-06:59 action=drop comment="Bedtime internet cutoff"
# School hours (8 AM - 3 PM weekdays)
/ip firewall filter add chain=forward src-address=192.168.88.50 time=8:00-14:59 action=drop comment="No internet during school"
Weekend vs Weekday Schedules
# Extended hours on weekends
/ip firewall filter add chain=forward src-address=192.168.88.50 time=22:00-23:59,sun,mon,tue,wed,thu action=drop comment="Weekday bedtime"
/ip firewall filter add chain=forward src-address=192.168.88.50 time=23:00-23:59,fri,sat action=drop comment="Weekend extended hours"
Bandwidth Management for Kids
Limit Download/Upload Speeds
# Limit gaming console bandwidth
/queue simple add name="Gaming-Console" target=192.168.88.60 max-limit=5M/2M burst-limit=10M/5M burst-threshold=4M/2M burst-time=30s
# Limit tablet bandwidth
/queue simple add name="Kids-Tablet" target=192.168.88.51 max-limit=3M/1M priority=5
Prioritize Educational Content
# Give priority to educational sites
/queue simple add name="Educational-Priority" target=192.168.88.0/24 dst-address=192.168.88.1/32 max-limit=10M/10M priority=1
Monitoring and Reporting
Track Internet Usage
# Enable logging for blocked sites
/ip firewall filter add chain=forward dst-address-list=blocked-sites action=drop log=yes log-prefix="BLOCKED-SITE"
# Monitor specific device activity
/tool torch interface=bridge-local src-address=192.168.88.50
View Connection History
# Check firewall logs
/log print where topics=firewall
# Monitor active connections
/ip firewall connection print
Advanced Configuration
Web Proxy Content Filtering
# Enable web proxy for advanced filtering
/ip proxy set enabled=yes port=8080
# Block specific content categories
/ip proxy access add dst-host=*.facebook.com action=deny
/ip proxy access add dst-host=*.youtube.com action=deny
/ip proxy access add dst-host=:adult action=deny
Layer7 Protocol Filtering
# Block specific applications
/ip firewall layer7-protocol add name=social-media regexp="^.+(facebook|twitter|instagram).+$"
/ip firewall filter add chain=forward layer7-protocol=social-media action=drop comment="Block social media apps"
Troubleshooting Common Issues
Blocking Too Much/Little Content
- Check address lists for accuracy
- Verify time schedules
- Test from child's device
- Review firewall logs
Performance Issues
- Monitor CPU usage during filtering
- Consider using simpler rules
- Enable FastTrack for allowed traffic
- Optimize queue settings
Bypass Attempts
- Block VPN protocols
- Monitor for DNS changes
- Use MAC address binding
- Regular rule updates
Best Practices
Regular Maintenance
# Update blocked sites list monthly
/system scheduler add name="update-blocklist" interval=30d on-event="/system script run update-blocklist"
# Regular monitoring
/system scheduler add name="parental-report" interval=1d on-event="/log print where topics=firewall"
Age-Appropriate Settings
- Young Children: Whitelist only approach
- Pre-Teens: Moderate filtering with time limits
- Teenagers: Focus on time management and education
Family Communication
- Explain the rules to children
- Set clear expectations
- Review blocked sites together
- Adjust rules as children mature
Follow for more family networking guides: Connect on LinkedIn | Join our WhatsApp Channel
mikrotik parental controls
website blocking
screen time management
internet filtering
kid control
safe browsing
content filtering
family internet
mikrotik kid control
