How to block the internet except school websites: 5 methods
The task sounds simple: during the lesson the computer should run only video calls and a couple of study services. In practice, most methods break within days. Here are the five options, honestly compared.
1. The hosts file
The most familiar method: the domains to close are appended into C:\Windows\System32\drivers\etc\hosts.
- Plus: free and no software to install.
- Minus: this is a blacklist. You close ten game sites — the eleventh opens. The file is edited in Notepad as administrator, and any VPN or encrypted DNS bypasses it completely.
2. Router filter
The home router settings include parental control and access schedules.
- Plus: one setting for the whole network.
- Minus: the child can switch to a mobile Wi-Fi hotspot or share the connection from a phone — and the router rules stop applying. The whole family also gets locked, not just one PC.
3. Public DNS filters
“Family DNS” services cut out adult and dangerous site categories.
- Plus: it lowers the risk of accidental exposure.
- Minus: social media, short videos and browser games stay available — exactly the things that ruin a lesson. A DNS filter is easily removed in adapter properties, or bypassed via browser-enabled DNS-over-HTTPS.
4. Manual Windows firewall rules
You can close all outgoing traffic and allow only the needed addresses — this is already the whitelist principle.
- Plus: the most reliable level — the system network filter.
- Minus: done by hand it means dozens of rules. Video-call addresses change, DHCP, DNS and NTP need to be allowed, and after the first service update the connection stops working. Above all, the rules can be deleted just as easily as they were created.
5. A ready whitelist with bypass protection
The same principle as option 4, but automatic: everything is closed except the allowed study services, plus VPN, proxy and encrypted DNS blocking, browser VPN extensions — and a watchdog service with the parent password required for switching off.
Quick comparison
| Method | Reliability | Complexity | Bypass via VPN? |
|---|---|---|---|
| hosts | Low | Low | Yes |
| Router | Medium | Low | Yes |
| DNS filter | Medium | Low | Yes |
| Manual firewall | High | High | Partly |
| Whitelist + protection | High | Low | No |
Bottom line
If the goal is for nothing to distract the child during the lesson, only approaches that close everything except the allowed set and shut down bypasses do work.
BelyyList — lesson mode in one press
Access to study services only, VPN and proxies blocked; switching it off requires the password.