Sky-Knight
Well-Known Member
- Reaction score
- 5,567
- Location
- Arizona
It's all fun and games until the wife needs to buy lingerie online...
Need recommendation - home network content filtering
- Thread starter DocGreen
- Start date
It's all fun and games until the wife needs to buy lingerie online...
Well she'll have Google as her primary DNS server than
Sky-Knight
Well-Known Member
- Reaction score
- 5,567
- Location
- Arizona
Well she'll have Google as her primary DNS server than
If your network is so weakly secured that random computers can use external DNS, you may as well not even have the filters. Because yes, kids are smart enough to change that. And you don't even need admin rights to do it with the correct browser plugins.
DNS filtration, sucks... it can work, but you still need an Untangle or something just as good to enforce its use.
Besides, I want my wife protected by that malware category...
And that's where DNS filtration falls down, when a uniform policy isn't good enough. On Untangle my favored dirty trick is to use port forwarding rules to grab egress traffic terminating on 53, and redirecting it to the local DNS service.
Got a user aiming at 8.8.8.8? Oh well, it's going to 208.67.222.222 anyway thanks to the local resolver have fun suckers!
That trick also keeps Google Devices in check... they have an annoyingly high tendency to use Google DNS no matter what.
