关于通过家长控制屏蔽Facebook应用及TP-Link Archer C6路由器WiFi屏蔽问题的技术咨询

Hey there, let's figure out why your TP-Link Archer C6's parental controls are blocking Facebook on desktop but slipping up on mobile apps. The core issue here is that mobile apps don't stick to the same web-only domains—they use hidden subdomains, direct IPs, or even bypass your router's DNS entirely. Here's how to fix it step by step:

• Block Facebook's full suite of domains (not just facebook.com)
  Basic parental controls often only target facebook.com, but mobile apps rely on tons of subdomains like graph.facebook.com, api.facebook.com, and fbcdn.net for data, media, and authentication. Head to your router's parental control or domain filtering settings, and add all these related domains to your blacklist. If your router has an "Access Control" section instead, use that—it's often more robust for domain-based blocking.

• Add Facebook IP ranges as a backup
  Mobile apps sometimes connect directly to Facebook's IP addresses instead of using domain names. To get these ranges, run nslookup facebook.com in your desktop's Command Prompt or Terminal a few times (you'll get different IPs each run). Then add these IP ranges to your router's access control blacklist. Just note that Facebook's IPs can change occasionally, so you might need to refresh this list every few months.

• Use the router's dedicated App Filter (if available)
  Many TP-Link Archer C6 models have an "App Filter" feature under the Advanced > Security menu. This tool identifies app traffic by its signature, not just domains—so you can select Facebook from the pre-built app list, and it will block both the web version and mobile apps automatically. This is the most reliable method if your router supports it.

• Force mobile devices to use your router's DNS
  A lot of mobile apps use DNS over HTTPS (DoH) or private DNS to bypass router filtering. On Android, go to Settings > Network & Internet > Private DNS and set it to "Automatic" (or turn it off entirely) so it uses your router's DNS. On iPhone, go to Settings > Wi-Fi > tap the info icon next to your network > Configure DNS > switch to "Automatic". This ensures the device can't use a third-party DNS that resolves Facebook's domains.

• Clear mobile app caches to test
  Mobile apps often cache old DNS records, so even after you set up blocking, the app might still connect using stored data. On Android, go to Settings > Apps > Facebook > Storage > Clear Cache. On iPhone, offload and reinstall the app (Settings > General > iPhone Storage > Facebook > Offload App). Then test again to see if the block works.

备注：内容来源于stack exchange，提问作者Shihab