@subsh8r Hi, I understand the frustration — you’re expecting a simple “add site → block site” option.

On most TP-Link routers, blanket blocking is done in one of two ways:

1. Access Control / Blacklist (simplest method)
   Go to Advanced → Security → Access Control (or similar), enable it, set mode to Blacklist, then manually add the domains you want to block. This applies at router level without creating profiles.

2. Parental Controls (profile-based)
   This requires assigning devices to a profile and ensuring they’re actually connected through that router (not using mobile data or another DNS). Also, some HTTPS sites require blocking by domain name only, not full URL (no https://).

If websites remain accessible, common causes are:

• Device using custom DNS (like 8.8.8.8)

• IPv6 bypassing rules

• Rule not applied to the correct device

• DNS cache not cleared on test device

For stronger, automatic malicious site blocking, consider enabling HomeShield / security filtering if supported — that’s closer to what you’re looking for.

Right now, manual domain blocking is more like calling a Night & Day Emergency Dentist for each issue instead of having full-time prevention — it works, but it’s not always elegant.

If you share your exact router model, I can give precise steps.

  @annemoss 

Hi,

May I ask to which model of TP-Link router point #1 applies?

I have quite a few TP-Link routers and "Advanced -> Security -> Access Control" only allows me to block client devices from accessing the network completely, but not selectively per domains.