Thanks for the great suggestions ! We do actually use a Group Policy to block access to the Chromebox already purely on a time basis and I had not spotted the L7 FW rules but your idea is perfect....for now !!! I know we are in a game of "whack a mole" with them but I can only try....it is absolutely impossible to watch their every move but as much care and attention we can apply "automatically" is worth a try. She has already figured out that she can get around a "spyware app" we openly run own her phone by switching off the wireless and mobile data on her phone (which stops the cloud based timers from running) and manages to "achieve" over 4 hours of "Screentime" on her phone each day when she is supposed to be policed to only 1.5.....so yes we know we have to "keep smart" if we can and I am trying to do that. What is about to happen is the broken cloud based policer is going to be replaced by Apple Screentime (which has only just started working for us). This means other "specials" are needed (like replacing Safari with Chrome because Apple does not block Safari at all ever but I figured out how to do that as well). The thng is as soon as the door closes on her "untracked" iPhone time I can see the Chromebox usage rising and it is obvious what will be the main sites she will hit....he already sits on TWITCH once his XBOX Fortnite time runs out if the Chromebox is open and we do not see what he is doing I think from reading your suggestions the reasons my attempt at a URL filter failed before may have been that I did not STOP / START my iMac after I created the rule but I will try your idea once nI am home next weekend Thanks again !
... View more