blocking some www web pages

Hi

i'm running a NAT machine here that uses bind9 (named) to resolv domains for
the "other" pc's in my home network.

i would like an easy way to bind9 just don't resolv some domains, let's say,
when my kid punches certains www.sites in it's computer, named just ignore
that request and don't do the resolving.

thanks
ArameFarpado

ArameFarpado wrote:
> Hi
>
> i'm running a NAT machine here that uses bind9 (named) to resolv domains for
> the "other" pc's in my home network.
>
> i would like an easy way to bind9 just don't resolv some domains, let's say,
> when my kid punches certains www.sites in it's computer, named just ignore
> that request and don't do the resolving.
>
It's easier to put a transparent proxy on the machine and use that to
filter things you don't like. Provided you've got a firewall that stops
him bypassing the proxy then you'll be OK.

--
Dave
mail da (E-Mail Removed) (without the space)
http://www.llondel.org
So many gadgets, so little time

On Sun, 28 Jan 2007 19:19:53 +0000, ArameFarpado wrote:

> Hi
>
> i'm running a NAT machine here that uses bind9 (named) to resolv domains for
> the "other" pc's in my home network.
>
> i would like an easy way to bind9 just don't resolv some domains, let's say,
> when my kid punches certains www.sites in it's computer, named just ignore
> that request and don't do the resolving.
>
> thanks
> ArameFarpado

Dan's guardian is the most often used Linux internet content filter.

On Jan 28, 2:19 pm, ArameFarpado <a-farpado.s...@netcabo.pt> wrote:
> Hi
>
> i'm running a NAT machine here that uses bind9 (named) to resolv domains for
> the "other" pc's in my home network.
>
> i would like an easy way to bind9 just don't resolv some domains, let's say,
> when my kid punches certainswww.sitesin it's computer, named just ignore
> that request and don't do the resolving.
>
> thanks
> ArameFarpado

Using BIND, you could just make yourself authoritative for any domain
you wanted to block, then put the address as 127.0.0.1.
This would not be fun to update though, as it would mean updating
BIND's main config files every time you wanted to add a domain to
block.

I agree, something like Squid may be more what you're looking for.
Then, you also get the speed up benefits of a proxy cache.

-Anthony Altemara

AnthonyM wrote:
> Using BIND, you could just make yourself authoritative for any domain
> you wanted to block, then put the address as 127.0.0.1.
> This would not be fun to update though, as it would mean updating
> BIND's main config files every time you wanted to add a domain to
> block.
I think this solution serves fine... ain't gonna be much sites to block.

Thanks to all of you...

Regards
ArameFarpado