Advertisement Image BlackList


I removed the old method and now use this method:

A nice, easy, and effective way to block specific sites is to simply masqurade them. On my network, where I use a BIND server for the DNS needs, I simply added in entries for their sites too. It is quite simple. And it takes no configuration on the workstations as long as they use this as their nameserver (if not, simply add the servers address as the first entry for DNS).

All that is needed is this line in your named.conf file:
  include "/etc/adservers.named";

and then save adservers.named in the /etc directory, and reload named's config file. I added in "adbuster.wsr" in the main named.conf file, and a specific zone file for it. All the sites in the adservers.named file all point to the adbuster.zone located in /var/named/ads directory, which is a regular zone file with the A field set to an address on the LAN. I set it up as their own, but all are really using the ip of the bogus site adbuster.wsr. I added in that address to a virtual host in apache and ifconfig. Now, everyone on the LAN, without any configuring other than enable DHCP, will have these sites masquraded. Keep in mind that if they WANT them, simply add in a different DNS server, such as the ISP's one, or just add in the entries for the site they want in their hosts file with the real IP of that domain, since the default is to check there first and then go to a nameserver.

The directory locations are arbitray, and for this case is set up the way it is done in Red Hat Linux.