How to blanket block

How to blanket block

How to blanket block
How to blanket block
Sunday
Model: Archer AX53  
Hardware Version: V1
Firmware Version: 1.5.4

hi

 

I would like to blanket block malicious websites that internet users should not be visiting.

 

Is there any way to do this in the simplest way ever like other routes, hop onto the web link, click to settings and just add websites?

 

How is such a simple feature not available?

 

The tether app does not work.

 

I've gone through the painful process of adding a profile, adding devices, adding websites, yet the websites remain accessible on a test device on the profile.

 

Why is such a cumbersome process required? what ever happened to simplicity.

  0      
  0      
#1
Options
5 Reply
Re:How to blanket block
Tuesday

  @subsh8r Hi, I understand the frustration — you’re expecting a simple “add site → block site” option.

On most TP-Link routers, blanket blocking is done in one of two ways:

  1. Access Control / Blacklist (simplest method)
    Go to Advanced → Security → Access Control (or similar), enable it, set mode to Blacklist, then manually add the domains you want to block. This applies at router level without creating profiles.

  2. Parental Controls (profile-based)
    This requires assigning devices to a profile and ensuring they’re actually connected through that router (not using mobile data or another DNS). Also, some HTTPS sites require blocking by domain name only, not full URL (no https://).

If websites remain accessible, common causes are:

  • Device using custom DNS (like 8.8.8.8)

  • IPv6 bypassing rules

  • Rule not applied to the correct device

  • DNS cache not cleared on test device

For stronger, automatic malicious site blocking, consider enabling HomeShield / security filtering if supported — that’s closer to what you’re looking for.

Right now, manual domain blocking is more like calling a Night & Day Emergency Dentist for each issue instead of having full-time prevention — it works, but it’s not always elegant.

If you share your exact router model, I can give precise steps.

  0  
  0  
#2
Options
Re:How to blanket block
Tuesday

  @annemoss 

 

Hi,

 

May I ask to which model of TP-Link router point #1 applies?

 

I have quite a few TP-Link routers and "Advanced -> Security -> Access Control" only allows me to block client devices from accessing the network completely, but not selectively per domains.
 

  1  
  1  
#3
Options
Re:How to blanket block
Tuesday - last edited 14 hours ago

Point#1 applies only to the Old Green UI routers and some recent entry level router models like WR841N / WR840N - details.

As per the OP inquiry you could test with the Cloudflare's DNSs  for "Adult Content + Malware (IPv4): 1.1.1.3 and 1.0.0.3" and check if it suits your needs.

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
  1  
  1  
#4
Options
Re:How to blanket block
Wednesday
thanks for your response @annemoss I have an AX3000 Model: Archer AX53 Hardware Version: V1 Firmware Version: 1.5.4 Using option 1 -> I am not presented with any option to add domains. I can't attach a screenshot here, I can only toggle the mode from Access to Deny. I guess firmware updates have removed this option and they are now behind a subscription. Very scammy. Option 2. -> I managed to find this setting and moved it to 1.1.1.1 (CloudFlare DNS). If I had known that this router requires me to pay for standard features on others I would not have entered this eco-system.
  0  
  0  
#5
Options
Re:How to blanket block
Wednesday
Thanks woozle for your reply. Applies to AX3000 Model: Archer AX53 Hardware Version: V1 Firmware Version: 1.5.4 Yes, I have the same experience as you. No ability to add domains. A standard feature on routers, likely hidden behind a virtual "paywall" which must be accessed via monthly subscription. TP Link are unscrupulous.
  0  
  0  
#6
Options