If you can get in via telnet with the described methods you can try my iptables rule. Alternatively you can install Freetz, and then my rule should work. They say some of the documentation is in German so use google translate.
This is an excerpt from Linux Voice
FRITZ!Box 7490 - Linux Voice
There’s a surprising amount you can do with the FRITZ!box if
you’re willing to hack around a little. Telnet can be enabled,
for instance, by pressing ‘#’ on a connected phone, and
dialling 96*7*. You’ll even see a message to tell you it’s
enabled (switch the 7 to an 8 to disable it). You can now
connect to your router from the command line by typing telnet
ip_address, and entering your web admin password. You’ll
now find yourself in a fairly recognisable Linux command line
environment. You can ls or type top and take a look around
the filesystem. wget is also available and there are ways of
installing user-compiled packages like ‘DropBear’, but we
wouldn’t suggest doing this.
Instead, we’d recommend taking a look at the Freetz. This
is a collection of open source modifications that can be made
to your router’s default firmware, turning it into a much more
flexible and hackable device (and likely voiding the warranty
at the same time). You need to create a virtual machine with
a specific build environment and then pull the latest files from
a GitHub account before building it all from a basic menu
system. Nearly all the important and relevant information
is in German, making the task that much harder if you don’t
speak the language. But if you want greater control over your
If the default firmware doesn’t give you enough
control, you can access the OS with Telnet or install
an open source update called Freetz.
hardware, and the ability to make your own firmware changes,
it’s worth the effort. We found it particularly useful to add
wider VPN functionality, including OpenVPN, as well as easily
adding SSH and other applications.
Short term logging:
iptables -I OUTPUT 1 -p tcp -m tcp -m multiport --dports 80,443 -J LOG --log-prefix "I visited a website "
install mysql and ulogd2
mysql -u root -p < /src/ulogd2/doc/mysql-ulogd2.sql
This file may not be in the same place on your computer
find / -iname "mysql-ulogd2.sql"
if it says file not found
change this part of ulogd.conf
# netlink multicast group (the same as the iptables --nflog-group param)
# Group O is used by the kernel to log connection tracking invalid message
iptables -I OUTPUT 1 -p tcp -m tcp -m multiport --dports 80,443 -J NFLOG --nflog-group 1 --nflog-prefix "I visited a website "
ONLY iptables and ulogd2 NEED to be on your fritzbox, and the rest can be put anywhere on your network.