0

I have Windows Server 2008 and I want to block ALL websites that provide games. Can I do this using DNS?

2
  • 2
    The definition of "ALL" will only be as accurate as the site-content-classification-service which you use. No service will identify 100% of the sites providing "games".
    – jscott
    Nov 4, 2010 at 14:16
  • 5
    Block all websites that provide games? Impossible. Don't believe anyone who tells you differently. You can probably get results that are good enough for most people by using OpenDNS.
    – Rob Moir
    Nov 4, 2010 at 22:55

5 Answers 5

1

Yes, I use opendns. they already have all these categorized so you just manage it from their website. Put the DNS on your router so that everyone that uses your router as a DNS server will use opendns to resolve IPs.

0

You could use opendns as your dns server. They provide content filtering.http://www.opendns.com/

0

Your best bet is through a firewall if you have one in your network.

The catch is that if your users are computer savvy enough they can modify the TCP settings on their workstations to use an open DNS server such as Google's and in addition they can edit the hosts files on their windows systems to manually provide domain name resolution and or simply use the IP address in a browser if the site allows it.

A combination of multiple steps will block suggested sites.

3
  • 1
    Firewall DNS traffic at the edge so that only your internal DNS servers can query public DNS servers. Nov 4, 2010 at 14:27
  • Only Admins / Power Users can modify network settings. Your users aren't in these groups, right? Also, I'll +1 what Graeme says. Nov 4, 2010 at 15:28
  • yes of course just in speculation here since we are not for certain what the domain policy settings are set as. Nov 4, 2010 at 15:51
0

If it is only few websites to block, you can edit the hosts file located in %systemdrive%/windows/system32/drivers/etc/hosts, and add corresponding entries to block the websites.

1
  • 1
    Mucking about with the hosts file is about the worst way I can think to manage this, or any thing else. If he's the sysadmin, he's probably managing DNS already.
    – jscott
    Nov 4, 2010 at 23:02
0

To be honest, DNS is not the best way to do this. Even though you can make a decent start, you should probably think about a proper web filter if you believe there may be more call for this sort of thing down the line. Web filters aren't expensive these days.