Re: Windows server,DNS and unwanted junk

From: Solbu (solbu_at_ugyldig.start.no)
Date: 06/02/04 

Date: Wed, 02 Jun 2004 09:48:21 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On tirsdag 1. juni 2004, 20:28 Nikitas tried to express an opinion:

> The idea is I like to put a blacklist of known sites
> somewhere in DNS on the server so they wont resolve on the local lan. Any
> suggestions or web links to help me in this is appreciated.

I do something similar, only I use my own DNS server to accomplish this.

I have a dedicated zone file for such domains in my dns server (BIND on Linux).
I simply let my dns server to be primary dns server for these domains,
and points the only "a record" to ip address 127.0.0.2 (not 127.0.0.1).

Then I set up my computers in the network to use my DNS server
as primary DNS, some even got this as the only dns server.

woilla..

I primary used this to block advertizments on internet for users
who refused to use my proxy server.

The advantage of using this method, is that I don't have to maintain
a hosts file in order to keep up with the changing adresses within the domain.
(The hosts file also work for that machine only.)

I just add the domain in the dns server,
use the blocked.zone file for the domain,
and the domain is no longer accesible. :-)

(doubleclick.net is one of the domains blocked here.. hehe.)

Just add the domains you want blocked to the server, and it's gone.

- --
Solbu - http://www.solbu.net
Remove 'ugyldig' for email
PGP key ID: 0xFA687324
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFAvYZJT1rWTfpocyQRAtwEAKDyaWHQ6bubvV5xbmrzZE9Y9HKxdwCfeXYM
faA3D/lJ8FvrfGRkTT95wLY=
=edwD
-----END PGP SIGNATURE-----

Relevant Pages

  • Re: Hosts file ignored
    ... > any of the entries I have made to the server's hosts file. ... > Successfully flushed the DNS Resolver Cache. ... > I am not running a DNS server on my system. ... > I can ping IP addresses without any problem, both on the LAN and on ...
    (microsoft.public.windows.server.general)
  • Re: Cant see out to .co.uk from inside my .local domain (forward l
    ... Ping cp.xxx.co.uk, same question. ... I found out the ip of my .co.uk so I put this into the hosts file of the ... network only from the server which I changed the hosts file for. ... Indeed is it even a DNS issue. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant see out to .co.uk from inside my .local domain (forward l
    ... Well I removed the entry from my hosts file and issued a ping command to both ... network only from the server which I changed the hosts file for. ... Indeed is it even a DNS issue. ...
    (microsoft.public.windows.server.sbs)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... The name.local entries are used by my apache server to implement ... change button, more button, the "Primary DNS suffix of this ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)
  • Issues migrating SBS 2003 domain to Server 2008 Standard
    ... We are stuck migrating our SBS 2003 domain to Server 2008. ... Fatal Error:DsGetDcName (SRV-EXCH) call failed, ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)