[dns-operations] DNS-based site blocking in the UK

Joseph S D Yao jsdy at tux.org
Mon Aug 8 14:04:55 UTC 2011


On Mon, Aug 08, 2011 at 02:00:03PM +0100, Jim Reid wrote:
...
> DNS blocking would perhaps offer a simpler and less expensive option,
> but it is likely to be fully effective only until DNSSEC is  
> implemented, so is perhaps not a long term solution. ...
...


Couldn't you just tell your own resolvers to "trust" your faked DNS
entries blocking the given names?  Granted this only protects against
URLs with the blocked names and not other names or IP addresses in any
of their forms, but I don't see this as as much of a problem.


--
/*********************************************************************\
**
** Joe Yao				jsdy at tux.org - Joseph S. D. Yao
**
\*********************************************************************/



More information about the dns-operations mailing list