[dns-operations] DNS-based site blocking in the UK
    Joseph S D Yao 
    jsdy at tux.org
       
    Mon Aug  8 14:04:55 UTC 2011
    
    
  
On Mon, Aug 08, 2011 at 02:00:03PM +0100, Jim Reid wrote:
...
> DNS blocking would perhaps offer a simpler and less expensive option,
> but it is likely to be fully effective only until DNSSEC is  
> implemented, so is perhaps not a long term solution. ...
...
Couldn't you just tell your own resolvers to "trust" your faked DNS
entries blocking the given names?  Granted this only protects against
URLs with the blocked names and not other names or IP addresses in any
of their forms, but I don't see this as as much of a problem.
--
/*********************************************************************\
**
** Joe Yao				jsdy at tux.org - Joseph S. D. Yao
**
\*********************************************************************/
    
    
More information about the dns-operations
mailing list