add this line to /etc/named.conf

include "locallyblockeddomains.zones";


contents of locallyblockeddomains.zones:

// This bind zone is intended to be included in a running dns server for a local net
//
// It will return a 127.0.0.1 for the domains listed as malware
//
//  This is for locally determined domains we want blocked
//
//
zone "r.im"  {type master; file "/etc/namedb/blockeddomain.hosts";};
<snipped many more out>
zone "emailupgrader.clan.su" {type master;file "/etc/named/blockeddomain.hosts";};




this is the /etc/namedb/blockeddomain.hosts file:

$TTL    86400   ; one day

@       IN      SOA     ns1.geneseo.edu coloccia.geneseo.edu (
                        2007112601      ; serial
                        28800           ; refresh  8 hours
                        7200            ; retry    2 hours
                        864000          ; expire  10 days
                        86400 )         ; min ttl  1 day

                IN      NS      ns1.geneseo.edu.
                A       127.0.0.1
*               IN      A       127.0.0.1
*               IN      AAAA    ::1
; This zone will kill all traffic to a listed domain




Done.

Add domains you want blocked to the locallyblockeddomains.zones file.


-Rick





On 8/30/2012 10:28 AM, Russell Jones wrote:

On 8/30/2012 8:46 AM, wbr...@e1b.org wrote:
Russell Jones wrote on 08/30/2012 09:39:17 AM:

Normal web filtering software that auto updates is a better
approach. Using Bind with a manual list of domains to try to achieve
this is like trying to kill an ant hill 1 ant at a time
There are several sources of RPZ data such as Spamhaus and SURBL.  Both
are respected sources of spam filtering data.

(Disclosure: My employer subscribes to both for spam filtering, I have no
financial stake)


Oh I know, I use spamhaus myself for spam filtering - catches a ridiculous amount of spam. It is my understanding though the OP wants to filter domains for NSFW web browsing, not spam - specifically gambling sites.


_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

--
Rick Coloccia, Jr.
Network Manager
State University of NY College at Geneseo
1 College Circle, 119 South Hall
Geneseo, NY 14454
V: 585-245-5577
F: 585-245-5579

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to