Hi Kevin_Z, if TP-Link has no plans to add Access control based on ports in new routers then how can we prevent users from circumventing DNS servers. I used to have OPENDNS and CleanBrowsing as our DNS resolvers on my network with Adult and Family filtering DNS IPs configured on my wireless router. I had created firewall rule to block all DNS requests on port 53 to servers except CleanBrowsing DNS. If anyone tried to bypass or circumvent DNS server entries manually on their computer then they would be left out without internet. It was working flawlessly when I had router with old firmware. The option is missing in almost all of the routers with new UI, I may have to install additional hardware firewall to restrict access to users as mentioned which I don't think is economical to everyone.