{"id":600,"date":"2026-02-11T22:22:49","date_gmt":"2026-02-11T22:22:49","guid":{"rendered":"https:\/\/blog.asambe.ai\/index.php\/2026\/02\/11\/router-settings-for-a-safe-phishing-drill-home-guide\/"},"modified":"2026-02-11T22:22:51","modified_gmt":"2026-02-11T22:22:51","slug":"router-settings-for-a-safe-phishing-drill-home-guide","status":"publish","type":"post","link":"https:\/\/blog.asambe.ai\/index.php\/2026\/02\/11\/router-settings-for-a-safe-phishing-drill-home-guide\/","title":{"rendered":"Router Settings for a Safe Phishing Drill Home Guide"},"content":{"rendered":"<p>Want to run a safe phishing drill at home? This step-by-step guide shows you how to adjust your router (the box that creates your home Wi\u2011Fi network) so test emails and training links work, without weakening your security. You will set a temporary allowlist entry, enable logs, test, and then safely revert everything.<\/p>\n<h2>Table of Contents<\/h2>\n<ul>\n<li><a href=\"#before-you-start\">Before You Start<\/a><\/li>\n<li><a href=\"#quick-fix-steps\">Quick Fix Steps<\/a><\/li>\n<li><a href=\"#plan-your-drill\">Plan Your Drill<\/a><\/li>\n<li><a href=\"#adjust-router-settings\">Adjust Router Settings<\/a><\/li>\n<li><a href=\"#deeper-diagnosis\">Deeper Diagnosis<\/a><\/li>\n<li><a href=\"#os-variations-and-commands\">OS Variations and Commands<\/a><\/li>\n<li><a href=\"#preventive-care\">Preventive Care<\/a><\/li>\n<li><a href=\"#when-to-seek-help\">When to Seek Help<\/a><\/li>\n<li><a href=\"#conclusion\">Conclusion<\/a><\/li>\n<li><a href=\"#frequently-asked-questions\">Frequently Asked Questions<\/a><\/li>\n<\/ul>\n<h2 id=\"before-you-start\">Before You Start<\/h2>\n<ul>\n<li>Prerequisites:\n<ul>\n<li>The drill domain or link from your organizer (example: <em>training.example.com<\/em>).<\/li>\n<li>Router admin password and access to its web page.<\/li>\n<li>A device connected to your home Wi\u2011Fi for testing.<\/li>\n<\/ul>\n<\/li>\n<li>Time estimate: 25\u201345 minutes (including testing and cleanup).<\/li>\n<li>Difficulty: Medium (follow the steps closely and you\u2019ll be fine).<\/li>\n<li>What can go wrong:\n<ul>\n<li>Accidentally disabling security features and forgetting to re\u2011enable them.<\/li>\n<li>Locking yourself out of the router by changing the password and not saving it.<\/li>\n<li>Losing internet if you change DNS or WAN settings incorrectly.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong>Warning:<\/strong> Do not factory reset your router, disable the firewall, or install unknown software. If a step mentions turning off a protection, do it only for the short drill window and turn it back on immediately after.<\/p>\n<h2 id=\"quick-fix-steps\">Quick Fix Steps<\/h2>\n<ol>\n<li>Get the exact drill domain\/link from your organizer. Write it down precisely (e.g., <em>phish-training.example.org<\/em>).<\/li>\n<li>Log in to your router\u2019s admin page. Look for menus named Security, Parental Controls, Web Filtering, Safe Browsing, or DNS Filtering.<\/li>\n<li>Add a temporary allowlist\/exception for only the drill domain (no wildcards). Save.<\/li>\n<li>Enable logging (URL or security logs) so you can confirm what\u2019s blocked or allowed.<\/li>\n<li>Flush DNS on your device, then test the link (see OS steps below). Keep the window short (30\u201360 minutes).<\/li>\n<li>Run the drill: open the test email, inspect it, and practice safely without entering real passwords.<\/li>\n<li>Revert: remove the allowlist entry, confirm protections are on, and save.<\/li>\n<\/ol>\n<h2 id=\"plan-your-drill\">Plan Your Drill<\/h2>\n<h3>Decide your goal<\/h3>\n<ul>\n<li>Goal ideas: Practice spotting warning signs in an email, checking a URL before clicking, or reporting suspected phishing.<\/li>\n<li>Scope: Use only the official test link(s) from your organizer. Do not test with random suspicious sites.<\/li>\n<\/ul>\n<h3>Choose a short time window<\/h3>\n<ul>\n<li>Pick a 30\u201360 minute block when you can focus and revert settings right away.<\/li>\n<li>Inform family members so they\u2019re not surprised by temporary changes.<\/li>\n<\/ul>\n<h3>Prefer allowlisting over disabling protections<\/h3>\n<ul>\n<li>Best practice: add a precise exception for the drill domain.<\/li>\n<li>If your router has a single \u201cmalicious site blocking\u201d switch, avoid turning it off. If you must, do it only during the drill and turn it back on immediately.<\/li>\n<\/ul>\n<h2 id=\"adjust-router-settings\">Adjust Router Settings<\/h2>\n<h3>1) Open the router admin page<\/h3>\n<ul>\n<li>Connect to your home Wi\u2011Fi.<\/li>\n<li>Find your router\u2019s IP (often <code>192.168.0.1<\/code> or <code>192.168.1.1<\/code>). See OS commands below.<\/li>\n<li>Open a web browser and enter the router IP in the address bar. Sign in with your admin credentials.<\/li>\n<\/ul>\n<p><img decoding=\"async\" src=\"IMAGE_URL\" alt=\"Router admin login screen with fields for username and password\"><\/p>\n<h3>2) Back up your current configuration<\/h3>\n<ul>\n<li>Look for a Backup\/Export Settings option (often under Administration or System).<\/li>\n<li>Save a copy to your computer. Name it with today\u2019s date.<\/li>\n<\/ul>\n<p><strong>Warning:<\/strong> Backing up first lets you restore quickly if something goes wrong.<\/p>\n<h3>3) Enable security logging<\/h3>\n<ul>\n<li>Open Security\/Logs. Turn on logging for web filtering or threat blocking.<\/li>\n<li>If there\u2019s a log level, choose Normal or Informational (not Debug, to avoid excess data).<\/li>\n<\/ul>\n<h3>4) Add a temporary allowlist entry<\/h3>\n<ul>\n<li>Open Security, Parental Controls, Web Filtering, Safe Browsing, or DNS Filtering.<\/li>\n<li>Find Allowlist\/Exceptions. Add the exact domain (example: <code>training.example.com<\/code>).<\/li>\n<li><strong>Tip:<\/strong> If the drill uses a subdomain (like <code>link.training.example.com<\/code>), allowlist that exact subdomain. Avoid broad entries like <code>*.example.com<\/code>.<\/li>\n<li>Save changes.<\/li>\n<\/ul>\n<h3>5) Time-box any broad changes<\/h3>\n<ul>\n<li>If your router can schedule rules, set the allowlist to apply only during your drill window.<\/li>\n<li>Set a phone reminder to remove the exception when done.<\/li>\n<\/ul>\n<h3>6) Apply changes and avoid risky toggles<\/h3>\n<ul>\n<li>Apply\/Save. Reboot the router only if prompted.<\/li>\n<li><strong>Note:<\/strong> Do not disable the firewall or WAN protections. If \u201cphishing protection\u201d must be turned off, limit it to the drill window and revert immediately afterward.<\/li>\n<\/ul>\n<p><img decoding=\"async\" src=\"IMAGE_URL\" alt=\"Example of a router allowlist form showing a single domain entry and a save button\"><\/p>\n<h2 id=\"deeper-diagnosis\">Deeper Diagnosis<\/h2>\n<h3>Check physical connection<\/h3>\n<ul>\n<li>Ensure your modem and router lights show internet connectivity.<\/li>\n<\/ul>\n<p><img decoding=\"async\" src=\"IMAGE_URL\" alt=\"What the indicator lights should look like when the internet is online\"><\/p>\n<h3>Confirm your device is using the router<\/h3>\n<ul>\n<li>Verify you\u2019re on the home Wi\u2011Fi network (not a mobile hotspot or neighbor\u2019s network).<\/li>\n<\/ul>\n<h3>Verify DNS and filtering<\/h3>\n<ul>\n<li>Test: open only the drill link. If blocked, check router logs for a blocked domain entry.<\/li>\n<li>If blocked by a browser extension or antivirus, add a temporary exception there instead of weakening router protections.<\/li>\n<\/ul>\n<h3>If the test email never arrives<\/h3>\n<ul>\n<li>Check Spam\/Junk folders. Router settings rarely block emails; your email provider\u2019s filters do.<\/li>\n<li>Add the sender to contacts or allowlist in your email service, then try again.<\/li>\n<\/ul>\n<h3>After testing<\/h3>\n<ul>\n<li>Remove the router allowlist entry. Confirm your protections (web filtering, safe browsing, DNS filtering) are back on.<\/li>\n<li>Spot-check by visiting a known harmless blocked test site if your router provides one, or review the logs to confirm blocking is active again.<\/li>\n<\/ul>\n<h2 id=\"os-variations-and-commands\">OS Variations and Commands<\/h2>\n<h3>Windows<\/h3>\n<ul>\n<li>Find router IP: Press Windows+R, type <code>cmd<\/code>, then run <code>ipconfig<\/code>. Look for \u201cDefault Gateway.\u201d<\/li>\n<li>Flush DNS: Open Command Prompt as a normal user and run <code>ipconfig \/flushdns<\/code>.<\/li>\n<\/ul>\n<h3>macOS<\/h3>\n<ul>\n<li>Find router IP: System Settings &gt; Network &gt; Wi\u2011Fi &gt; Details &gt; Router. Or run <code>route -n get default | grep gateway<\/code> in Terminal.<\/li>\n<li>Flush DNS: In Terminal, run <code>sudo killall -HUP mDNSResponder<\/code> (you\u2019ll be asked for your Mac password). No output means it worked.<\/li>\n<\/ul>\n<h3>iOS (iPhone\/iPad)<\/h3>\n<ul>\n<li>Quick DNS refresh: Toggle Airplane Mode on, wait 5 seconds, then off.<\/li>\n<li>Renew lease: Settings &gt; Wi\u2011Fi &gt; (i) next to your network &gt; Renew Lease.<\/li>\n<\/ul>\n<h3>Android<\/h3>\n<ul>\n<li>Quick DNS refresh: Toggle Airplane Mode on, wait 5 seconds, then off.<\/li>\n<li>Private DNS check: Settings &gt; Network &amp; internet &gt; Private DNS. If it\u2019s set to a filtering provider, you may need to switch to \u201cAutomatic\u201d during the drill, then switch back.<\/li>\n<\/ul>\n<p><strong>Warning:<\/strong> If you change Private DNS or VPN settings on a device, revert them right after the drill to restore full protection.<\/p>\n<h2 id=\"preventive-care\">Preventive Care<\/h2>\n<ul>\n<li>Revert settings immediately: remove allowlists and confirm protections are on.<\/li>\n<li>Update router firmware: check Administration\/System &gt; Firmware\/Update.<\/li>\n<li>Use a strong, unique admin password and enable two-step verification if available.<\/li>\n<li>Document what you changed and when you reverted it.<\/li>\n<li>Continue security habits: avoid unknown downloads, keep devices updated, and teach family how to spot phishing. See the <a href=\"https:\/\/www.consumer.ftc.gov\/articles\/how-recognize-and-avoid-phishing-scams\" target=\"_blank\" rel=\"noopener\">FTC guide to recognizing phishing<\/a>.<\/li>\n<\/ul>\n<h2 id=\"when-to-seek-help\">When to Seek Help<\/h2>\n<ul>\n<li>You can\u2019t log in to the router or forgot the admin password (contact your ISP or router vendor support; avoid factory reset unless directed).<\/li>\n<li>The internet stops working after a change and doesn\u2019t recover after you undo it.<\/li>\n<li>You see repeated blocks in logs for unrelated sites or devices, which could indicate malware.<\/li>\n<li>Your router doesn\u2019t offer allowlists or filtering controls needed for the drill\u2014ask the organizer for alternate test domains or device-level steps.<\/li>\n<\/ul>\n<p><strong>Tip:<\/strong> Have details ready: router model, ISP name, firmware version, and screenshots of the settings you changed.<\/p>\n<h2 id=\"conclusion\">Conclusion<\/h2>\n<p>You set up your router to support a safe phishing drill: you planned a short window, added a precise allowlist, enabled logs, tested, and then reverted. These steps let you practice spotting scams while keeping your home network protected. Save this checklist for your next drill, and keep your router updated and secured.<\/p>\n<h2 id=\"frequently-asked-questions\">Frequently Asked Questions<\/h2>\n<h3>Will this make my network less safe?<\/h3>\n<p>Not if you time-box the change, allowlist only the drill domain, and revert immediately. Avoid disabling broad protections whenever possible.<\/p>\n<h3>Do routers block emails?<\/h3>\n<p>Usually no. Email filters live with your email provider or app. The router may block web links you click; that\u2019s what you adjusted temporarily.<\/p>\n<h3>Should I use a VPN during the drill?<\/h3>\n<p>A VPN may bypass or change DNS filtering, affecting the test. For consistent results, pause VPN during the drill and turn it back on after.<\/p>\n<h3>I can\u2019t find the allowlist option\u2014what now?<\/h3>\n<p>Look for terms like Exceptions, Trusted Sites, or Bypass under Security\/Parental Controls\/DNS Filtering. If it\u2019s not available, ask the organizer for a different test domain or do a device-level exception instead.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Set up your home router for a safe phishing drill. Step-by-step allowlist, logging, and DNS tips for Windows, macOS, iOS, and Android. Revert settings safely.<\/p>\n","protected":false},"author":1,"featured_media":599,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[9],"tags":[],"class_list":["post-600","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it-docs"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/blog.asambe.ai\/wp-content\/uploads\/2026\/02\/2026-02-11-22-22-42-data.png?fit=1024%2C1024&ssl=1","_links":{"self":[{"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/posts\/600","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/comments?post=600"}],"version-history":[{"count":1,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/posts\/600\/revisions"}],"predecessor-version":[{"id":601,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/posts\/600\/revisions\/601"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/media\/599"}],"wp:attachment":[{"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/media?parent=600"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/categories?post=600"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.asambe.ai\/index.php\/wp-json\/wp\/v2\/tags?post=600"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}