Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Im trying to setup a 'whitelist' DNS server for a small school network to prevent the kids accessing inappropriate sites (ie. students should only be able to access a pre-selected list of sites) and be forwarded to an access-denied page if they try accessing such a page.

Im aware this can be done using Squid3 but in this specific case its not a viable option.

I read the man named page as well as a number of tech sites and Im not having much luck. If any one could give me nudge in the right direction, I'd really appreciate it.


share|improve this question

BIND is really unsuited to this scenario, since it is primarily a large-scale authoritative nameserver.

You could, of course, define forward zones for everything you wish to whitelist, and then have those zones resolved by a second instance, but that is convoluted beyond measure.

Just use a proxy with good access control, such as Squid-cache.

share|improve this answer
Unfortunately we cant use squid (as mentioned) for banwidth reasons. but if you have any other possible solutions I would really love to hear them. as it stands I think I will be using powerdns – garyj Apr 27 '12 at 14:20
-1 Your answer is to use something the OP said wasn't possible. – Andrew Aug 23 '13 at 20:38

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.