Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am using DNSmasq, OpenDNS and DYNDNS. DYNDNS is for my FTP site, and I am using OPEN DNS to filter porn from my kids itouch/ipad. However, I would like a few computers to have the capability to bypass openDNS, and pass through to a fast DNS server like google or similar. I would also like to fowrard all traffice from DYNDNS to my FTP server. Any ideas? This is what I have thus far..

strict-order
dhcp-mac=filter,00:25:64:DB:A8:8A
dhcp-option=net:filter,6,8.8.8.8,8.8.4.4 

Its not working thus far, can someone help me accomplish what I want to do?

share|improve this question

closed as off topic by Shane Madden, EEAA, mgorven, Wesley, Iain Jun 13 '12 at 7:21

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
How is it "not working"? –  mgorven Jun 13 '12 at 3:13
    
Welcome to Server Fault! Home networking questions are off topic for serverfault. It may be on topic for Superuser but check their faq and search their site before asking. –  Iain Jun 13 '12 at 7:22
add comment

1 Answer

dnsmasq has an option to tag hostnames or MAC addresses with tags like "red" or "kids", and then serve them different DHCP options basing on their tag.

Serve kids' devices with censoring DNS server IPs, and other devices with non-censoring DNS servers.

That would work only if the kids don't know how to set up their devices' networking to static mode :)

You can additionally enforce the policy on the firewall by dropping packets going to port 53/udp and 53/tcp from kids' MAC addresses to any non-whitelisted host.

However, that would be of no use if your kids turn on 3G on their devices :3

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.