using dns to block spyware

[jcharth]

Hello,

Is it possible to block spyware related sites using w2k dns servers?
Do I have to create a new zone for each website that i want to block?
or there is a way to stick them all in in a container?

 

[Herb Martin]

Hello,

Is it possible to block spyware related sites using w2k dns servers?

Not exactly but you can make it so that many such
sites will resolve to dummy addresses -- this won't
BLOCK access by IP.

You can use a product like Privoxy (free on SourceForge.net)
or ISA (from MS) or with hosts files or directly in DNS.

Do I have to create a new zone for each website that i want to block?
or there is a way to stick them all in in a container?

I wouldn't but that is about the only choice in MS.

For my blocking DNS I use a BIND server since it
allows me to load the individual (A) records in through
the cache (load the cache from disk file.)

I would really prefer that MS DNS did this, but since
it doesn't I use a BIND server for this ONE purpose.
[/QUOTE]