How to Install CTparental on Ubuntu 20.04 & Debian 10

CTparental is a parental control tool used to control how someone uses the computer, either for internet browsing or any other specific computer usage. Design of CTparental was motivated by existing tools like iptables, dnsmasq, inguardian privoxy which independently can do some parts but missing other pieces.

So in essence, CTparental leverage all these tools to create a fully-fledged parental control solution with an intuitive and easy to use web interface powered by lighttpd. Now that you know what CTparental, we can go ahead and install it on our Linux operating system.

We'll cover installation CTparental on Ubuntu 20.04 and Debian 10 since these are the latest release of both distributions as of this writing.

Features of CTparental

Below is a list of things supported by CTparental

  • Filtering of inappropriate content using Blacklist or Whitelist
  • Time to be spent browsing the internet
  • Time spent on a computer session - control of active hours
  • Filtering of websites by categories
  • Setting the maximum browsing time of users.
  • Excluding group of people not undergoing filtering
  • User notifications every minute during the last 5 minutes before disconnection.
  • Custom Filter sites to leave accessible even if they are present in one of the categories that we want to block.
  • Force SafeSearch, duckduckgo, and Google
  • SafeSearch bing strength (in http only)
  • Blocking search engines deemed unsafe as Bing in https and
  • Setting grub2 password
  • Customized rules management for iptables. Activated with CTparental -ipton
  • Works with Firefox, Midori, chromium

Installing CTparental on Ubuntu 20.04

Installation of CTparental on Ubuntu 20.04 is done from a binary of this application. This binary is downloadable from Gitlab. Ensure you're pulling the latest release from the provided link.

If you have an older version of CTparental, ensure it is uninstalled first by running:

$ sudo apt-get autoremove --purge ctparental clamav-* privoxy e2guardian dnsmasq nginx* lighttpd*
$ sudo rm -rf /etc/CTparental
$ sudo rm -rf /etc/lighttpd/
$ sudo rm -rf /etc/nginx/

This is also applicable to other releases of Ubuntu. Then download latest CTparental and install it using:

$ wget -c
$ sudo apt-get update 
$ sudo apt-get install gdebi-core
$ sudo gdebi ctparental_ubuntu20.04_lighttpd_4.44.18-1.0_all.deb

If you get dependency issues, then first do:

$ sudo apt-get -f install

And again run:

$ sudo gdebi ctparental_ubuntu20.04_lighttpd_4.44.18-1.0_all.deb

During installation, it will ask you to set the username and password, input this and re-enter to confirm. Note that the password has to be numbers or digits only, no use of special characters.

Installing CTparental on Debian 10

The installation of CTparental on Debian 10 is similar to the one for Ubuntu since the two operating systems share a similar code base.  As usual before installing a new package, make sure there is no trace of it that may have been installed earlier. To remove any existing version, run the commands below:

$ sudo apt-get autoremove --purge ctparental clamav-* privoxy e2guardian dnsmasq nginx* lighttpd* 
$ sudo rm -rf /etc/CTparental 
$ sudo rm -rf /etc/lighttpd/ 
$ sudo rm -rf /etc/nginx/

The last command is for removing any configuration files from /etc/ directory. After executing these commands, install CTparental:

$ wget -c
$ sudo apt-get update
$ sudo apt-get install gdebi-core
$ sudo gdebi ctparental_debian10_lighttpd_4.44.18-1.0_all.deb

Confirm that the package has been successfully installed using:

$ sudo apt-cache show ctparental
Package: ctparental
Status: install ok installed
Priority: optional
Section: utils
Installed-Size: 2568
Maintainer: marsat <>
Architecture: all
Version: 4.44.18-1.0
Depends: debconf (>= 0.5) | debconf-2.0, debconf, dnsmasq, lighttpd, gamin, sudo, wget, php-cgi, php-xml, libnotify-bin, notification-daemon, nftables, rsyslog, e2guardian, privoxy, openssl, libnss3-tools, console-data, dnsutils, whiptail, ifupdown2 | ifupdown, rsync, openssh-server
Conflicts: dansguardian
/etc/CTparental/CTparental.conf c423d608fbc18de0512efb68c4fdcaf6
/etc/CTparental/dist.conf 2a0aee0e43e736b8edb10828bf39be8f
Description: Controle parental.
Filtrage web basé sur dnsmasq, e2guardian, privoxy, lighttpd , systemd timer et nftables
une gestion des horaires de connection est aussi intégrée et
une interface web (http://admin.ct.local) permettant de paramétrer tous ça.
Le couple login mot de passe doit être saisi à l'install, mais peut être
modifié par la suite grâce à la commande -uhtml.
Description-md5: 26847a28b1b9824d5d1994ca6224ffe0

The status should be  "install ok installed".

Accessing  CTparental Web Interface

Now that everything is set - We have installed the CTparental package successfully, It's time to access the web interface and do further configurations from there. The web URL will be configured automatically, with relevant iptables rules in place. No further configurations are required for the URL to be functional. To access the web interface for CTparental, use this link:


The hostname admin.ct.local has an ip address which you can confirm from a ping on the local system:

$ ping -c 2 admin.ct.local
PING admin.ct.local ( 56(84) bytes of data.
64 bytes from admin.ct.local ( icmp_seq=1 ttl=64 time=0.038 ms
64 bytes from admin.ct.local ( icmp_seq=2 ttl=64 time=0.052 ms

--- admin.ct.local ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1026ms
rtt min/avg/max/mdev = 0.038/0.045/0.052/0.007 ms

This ip is mapped to ip /etc/hosts file as below:

# cat /etc/hosts localhost mypc

...... admin.ct.local 
fc00::127:11 admin.ct.local privet.ct.local 
fc00::127:10 privet.ct.local

This asks for authentication - use the username and the password provided earlier during the setup.

Wrapping up

CTparental is one of the best tools for filtering access to web content. The fact that it provides an easy to use web interface means anyone can administer it. No deep knowledge of Linux internals is required. The tool can be installed within 5 minutes and ready to use. It is a productive tool for kids and students, and even in a corporate environment. You can save on bandwidth by restricting access to sites like youtube and torrent which are BW intensive.

4 Comments... add one

  1. Does it work with ubuntu 18.04 which has switched to Gnome UI? I was previously using timekpr-revived which no longer seems to work.


Leave a Comment