Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have Windows Server 2008 and I want to block ALL websites that provide games. Can I do this using DNS?

share|improve this question

closed as not constructive by Chris S Jul 20 '12 at 23:47

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

The definition of "ALL" will only be as accurate as the site-content-classification-service which you use. No service will identify 100% of the sites providing "games". – jscott Nov 4 '10 at 14:16
Block all websites that provide games? Impossible. Don't believe anyone who tells you differently. You can probably get results that are good enough for most people by using OpenDNS. – RobM Nov 4 '10 at 22:55

Yes, I use opendns. they already have all these categorized so you just manage it from their website. Put the DNS on your router so that everyone that uses your router as a DNS server will use opendns to resolve IPs.

share|improve this answer

You could use opendns as your dns server. They provide content filtering.

share|improve this answer

Your best bet is through a firewall if you have one in your network.

The catch is that if your users are computer savvy enough they can modify the TCP settings on their workstations to use an open DNS server such as Google's and in addition they can edit the hosts files on their windows systems to manually provide domain name resolution and or simply use the IP address in a browser if the site allows it.

A combination of multiple steps will block suggested sites.

share|improve this answer
Firewall DNS traffic at the edge so that only your internal DNS servers can query public DNS servers. – ThatGraemeGuy Nov 4 '10 at 14:27
Only Admins / Power Users can modify network settings. Your users aren't in these groups, right? Also, I'll +1 what Graeme says. – Aaron Copley Nov 4 '10 at 15:28
yes of course just in speculation here since we are not for certain what the domain policy settings are set as. – Nick O'Neil Nov 4 '10 at 15:51

If it is only few websites to block, you can edit the hosts file located in %systemdrive%/windows/system32/drivers/etc/hosts, and add corresponding entries to block the websites.

share|improve this answer
Mucking about with the hosts file is about the worst way I can think to manage this, or any thing else. If he's the sysadmin, he's probably managing DNS already. – jscott Nov 4 '10 at 23:02

To be honest, DNS is not the best way to do this. Even though you can make a decent start, you should probably think about a proper web filter if you believe there may be more call for this sort of thing down the line. Web filters aren't expensive these days.

share|improve this answer