Whitelist allowed web addresses by subnet mask?

Question

macOS

Hello.

I made a separate account for the child on a macbook with a restriction on visited sites through "Screen Time / Only allowed websites." It was necessary to leave only an electronic diary and MS Teams. The problem is that Teams connects hosts from different IP addresses with each new connection, while MacOS only allows you to add one specific IP address or domain.

Entering the "Address" field without the prefix "https://" does not light up the "Finish" button, entering the address like " https://54.133.0.0/16 " as I understand it does not give the desired result, because Makos considers /16 not a mask, but part of the web address.
Now this list already consists of more than 200 addresses and is growing. I really do not want to add "hands" 65000+ IPs.

How can you make lists of allowed address ranges by mask using standard MacOS tools? If it is impossible by standard means, maybe there is a software that will allow this to be done?

I would like to do this on the actual poppy. Because making such lists on the router is much more problematic.

Answer 1

No way. There are no standard tools for this in the Mac axis. And most likely even in his regular firewall there is no such thing. And yes, it is a deliberately failed idea to block by ip addresses. Roskompozor took almost 2 years to understand this. I hope you don't need so much

Answer 2

Write in the settings "children / funny" DNS, Yandex seemed to have them

Answer 3

can you set up a personal dns for a child?
roll a local copy of bind, which would resolve as you need
https://habr.com/en/post/177649/
How to redirect all requests to one address?
set the required subnet as a zone for which allow-transfer for external resolve
zone "128.10.in-addr.arpa" { ... allow-transfer ... }