Block League of Legends

[Poetik92]

I have a client who has a highschool aged son who recently infected and consequently broke the family computer, the reason: League of Legends

Shes tried using an admin account and the rest with restricted accounts but he got access to the admin account and reinstalled the game, She(claimed) tried using the firewall and setting it up correctly but he has found his was around it. The kid is also looking at porn but somehow that's not as big as the League issue. With him Locked out from an admin account it seemed to have worked for a few days but the mom went to bed early one night and he got on and completely wiped the computer.

He gets on and the younger kids are unable to do homework on the computer because of him, he's also skipping homework and missing sleep because of the game. The parents are at wits end trying to find a way to completely block the game and keep it from being reinstalled or able to be played. I've suggested deepfreeze but off the top of my head I dont think that would actually PREVENT the installation or the playing of the game. The kid may be a master of GoogleFu so I'm taking all good suggestions into consideration.

 

[ohio_grad_06]

Got a client system in for something similar. Solution the client wants? Delete the teenager's admin account and all his files. Lock the computer down with a bios password so he can't even boot it up. Might be what you have to do. Or put the kid on a restricted account, use a bios password, then the parent would have to unlock it before their son could use it.

 

[tek9]

Get a Zyxel USG20w. It's their home version of a UTM. You have a content filter and antivirus on it and you can block categories of web sites entirely. The firewall is also very good and should be able to block whatever you need.

 

[fencepost]

I wrote up the stuff below as technical options, then it occurred to me that there may be a couple more thinking-outside-the-box ones. First, any very rural relatives that he could be shipped off to? "Sure you can play all you want on our 14.4kbps dialup line. Somehow nobody's ever gotten around to running anything faster out here."

Second, the parents should take up League of Legends, just enough to download every server-detectable cheat pack or bundle that they can. Then go onto the kid's account and use all of them. Get the kid so permabanned that he's blacklisted and unwanted in whatever groups he's part of as well as having his account(s) locked out.

For the more technical options, the following:

A BIOS boot password yes, but also sell her some kind of backup ("got on and completely wiped the computer"!). Remove any factory reinstall partitions to make a Windows reinstall/wipe less likely. I'm not sure quite how to react to the complete wipe scenario.

Make sure they have a unified network interface device (e.g. no separate router & cable/dsl modem) even though that may reduce your options for router-level control, otherwise he may just plug directly into the cable modem, etc.

Do things to add latency - see http://superuser.com/questions/6878...ng-time-network-connection-latency-on-windows, http://stackoverflow.com/questions/130354/how-do-i-simulate-a-low-bandwidth-high-latency-environment . 300-500ms latency makes browsing a bit annoying, but would make interactive games effectively unplayable. Unfortunately the best place to do this would be on a router with OpenWRT or the like, but I'm not sure if OpenWRT works on anything that also includes the modem component.

Finally, get rid of all desktop computers and replace with 1 or more laptops (or ultra-small units like a Brix) that leave the house with the parents.

 

[Lando1005]

It sounds like that kid might have some potential if he steered it in the right direction.

The BIOS password would be a pretty good deterrent, but we have to assume he is going to be using other internet enabled sources to find information on how to get around that as well. I also like the idea of getting him banned. That's nice and creative!

A couple other suggestions. A router with OpenWRT installed and properly configured OpenDNS with DNS-O-Matic and DynamicDNS could also assist. The router will need to be configured to force all DNS traffic through OpenDNS and block all other port 53 request. Blocking all LoL related ports through the router couldn't hurt as well.
As far as locking down the physical equipment goes, they could put a physical lock on the room with the computer and only allow access when they want him to use it. If it's a laptop they could physically lock it a desk in that locked room. Depending on how much they are willing to pay, you could also install a lock box that contains the router and modem to prevent him accessing them and resetting everything. Something like this maybe? If the network equipment isn't locked down in someway he will just circumvent it.

If all else fails, they can always call up A&E or Dr. Phil and try to make a buck off of it.

 

[fencepost]

I wouldn't have suggested getting him banned and ostracized, but if he's going so far as to wipe the PC (to a clean Windows so he can reinstall LoL?) then something serious and more permanent needs to happen.

 

[3ft]

Open DNS properly configured. Maybe something along the lines of K9 Web Protection? My sole childhood deterrents from too much online gaming were A) One phone line for the 1200 baud modem, couldn't connect to a BBS when Ma was on the phone, and B) Dad would have actually performed parenting and removed the computer and/or took a belt to my rear if need be. I know, a different world now.

 

[ohio_grad_06]

I'm just going by on laptops at least, not much success on defeating a bios password. If that does not work, maybe a hard drive password.

Just like the client I'm dealing with. I think the kid could do well if steered in the proper direction. Maybe it's time to have mom and dad consider a low end gaming pc and let him mess with that. You hate rewarding for behavior you don't like, but it keeps them off the parents machine. This kid I'm dealing with is smart. He got on and made himself the admin, then moved his mom's account to a standard account.

Fixed that. Heh heh. Per the mom's request, I made her the admin, blew away his account and all his files, along with steam. There went all his games too. Oops... That was what the mom requested. Tough break. Removed a bunch of spyware also, running a boot scan now. That should help things out.

 

[frostbyte5014]

Use AssWhipping v1.0 it works very effectively!

 

[cypress]

Use AssWhipping v1.0 it works very effectively!

Why this wasn't suggested earlier is beyond me, lmao!

 

[ohio_grad_06]

Some parents are too politically correct, you never know who you are dealing with. Like my cousin and her husband. Great people, but if kids need discipline, they just do time out. So the kid sits there and can whine etc.

When I was a kid, I didn't get spankings enough I'm sure, but my dad would take a belt doubled up and use that. You didn't want to test that limit to often. Dad knew how to snap the belt as well, which if you were in trouble that alone would make you jump.

 

[Poetik92]

Use AssWhipping v1.0 it works very effectively!

how much for this program? And can I automate it to run at the click of a button? Perhaps as part of my weekly maintenance lol.

It sounds like that kid might have some potential if he steered it in the right direction.

The BIOS password would be a pretty good deterrent, but we have to assume he is going to be using other internet enabled sources to find information on how to get around that as well. I also like the idea of getting him banned. That's nice and creative!

A couple other suggestions. A router with OpenWRT installed and properly configured OpenDNS with DNS-O-Matic and DynamicDNS could also assist. The router will need to be configured to force all DNS traffic through OpenDNS and block all other port 53 request. Blocking all LoL related ports through the router couldn't hurt as well.
As far as locking down the physical equipment goes, they could put a physical lock on the room with the computer and only allow access when they want him to use it. If it's a laptop they could physically lock it a desk in that locked room. Depending on how much they are willing to pay, you could also install a lock box that contains the router and modem to prevent him accessing them and resetting everything. Something like this maybe? If the network equipment isn't locked down in someway he will just circumvent it.

If all else fails, they can always call up A&E or Dr. Phil and try to make a buck off of it.

I like the idea of the bios password, that in combination with the one admin account and a restricted account for the rest of the users. Technically the kid is never supposed to be on the computer since he first messed around with the admin accounts not long ago.

 

[Poetik92]

I'm just going by on laptops at least, not much success on defeating a bios password. If that does not work, maybe a hard drive password.

Just like the client I'm dealing with. I think the kid could do well if steered in the proper direction. Maybe it's time to have mom and dad consider a low end gaming pc and let him mess with that. You hate rewarding for behavior you don't like, but it keeps them off the parents machine. This kid I'm dealing with is smart. He got on and made himself the admin, then moved his mom's account to a standard account.

Fixed that. Heh heh. Per the mom's request, I made her the admin, blew away his account and all his files, along with steam. There went all his games too. Oops... That was what the mom requested. Tough break. Removed a bunch of spyware also, running a boot scan now. That should help things out.

This is an original idea and as much as I'm against rewarding bad behavior it may work to keep the family PC and be a decent way to make an addition bit of revenue with the new PC and setup and monthly maintenance/monitoring

 

[ComputerRepairTech]

You could try blocking him using the same direct registry gpo block method cryptoprevent uses.

Edit: nevermind he would eventually try installing to another path

Edit2: could block the domain using the HOST file

 

[SoloCon]

Block ports @ the router lvl:

5000 - 5500 UDP - League of Legends Game Client
8393 - 8400 TCP - Patcher and Maestro
2099 TCP - PVP.Net
5223 TCP - PVP.Net
5222 TCP - PVP.Net
80 TCP - HTTP Connections
443 TCP - HTTPS Connections
8088 Spectator Mode

 

[ComputerRepairTech]

The thing about blocking via the router is it depends on if the router is in a location of the router cant be accessible to the teen otherwise you're either going to come home to a reset router or a PC directly connected to the modem.

 

[ComputerRepairTech]

I would try the hosts file to block the domain and you can be funny about it and make a non hidden file named hosts(alt+0160) with default hosts file information so if he does try to check that manually he may be fooled by the visible hosts(alt+0160) file thinking thats the real hosts file when the real one is hidden. (of course that wont work if he unhides files before checking)

Edit: Don't think he can modify the real host file with non admin access anyway

 

[cypress]

If you block at router level and even go around and change the host files and he still manages to try and get around this then...

AssWhipping v1.0 - needs to be installed ASAP!