Question about DNS on Windows..

[newsqlman]

For a temporary solution I was hoping to do use DNS to kind of not
allow users to go to certain websites.

Has anyone done this before? If so how would I add something in DNS
to return an ip address to the user of 127.0.0.1 for websites like
www.myspace.com and others.

Am trying to determine a good solution to go with but in the mean time
was hoping to get by with blocking them this way if possible. I know
people have put things in hosts files but I was wanting to do it from
the Windows 2003 DNS Server everyone uses for just a centralized area.

Thanks.

 

[Herb Martin]

For a temporary solution I was hoping to do use DNS to kind of not
allow users to go to certain websites.

Has anyone done this before? If so how would I add something in DNS
to return an ip address to the user of 127.0.0.1 for websites like
www.myspace.com and others.

Yes people have done this before, to (literally) "kind of" prohibit access
to
certain sites. I do it some.

As long as you realize this is NOT true security but only a hack that keeps
people from reaching them by NAME, not address. For true security use
a Proxy or Firewall server (e.g., ISA).

The real problem is that Microsoft DNS does't lend itself to "preloading
the DNS cache".

Not a big deal since you only need to do this on your "forwarder DNS
server" to the Internet -- BIND can preload the cache.

Am trying to determine a good solution to go with but in the mean time
was hoping to get by with blocking them this way if possible. I know
people have put things in hosts files but I was wanting to do it from
the Windows 2003 DNS Server everyone uses for just a centralized area.

Yes, hosts files work similary but have to be maintained on every
individual computer.

You probably don't want to get involved with BIND so seak a firewall,
you can even do a lot more with that.

Even Privoxy will do more -- allow some times to be visited but defang
javascript and other programs or dangerous material etc.

 

[Myweb]

Hello newsqlman,

For a centralized solution use the ISA server:
http://www.microsoft.com/isaserver/default.mspx

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.