I will keep everyone posted, I am also discussing this with some fellow edu IT 
peeps on our Ohio Tech list. They have to be facing the same issue......Google 
Docs is huge in edu right now. And teenagers searching for porn images on 
google images has always been huge. And I have also reached out to my filter 
company, their support is big in edu and they are pretty good.

From: Steven Peck [mailto:[email protected]]
Sent: Friday, February 10, 2012 2:07 PM
To: NT System Admin Issues
Subject: Re: DNS Partial zone CNAMEs?

Maybe point to someone like OpenDNS and see if you can configure it there?  Let 
us know what you get figured out, I am certainly curious.
On Fri, Feb 10, 2012 at 10:07 AM, Ben Scott 
<[email protected]<mailto:[email protected]>> wrote:
On Fri, Feb 10, 2012 at 10:44 AM, Kennedy, Jim
<[email protected]<mailto:[email protected]>> wrote:
> To utilize this solution, your school's network administrator would modify
> your DNS (Domain Name System) configuration to make Google domains, e.g.
> www.google.com<http://www.google.com> to be an alias or CNAME (canonical 
> name) of nossl.google.com<http://nossl.google.com>.
 I don't think you can do this with Microsoft's DNS server.

 You need something that can intercept or proxy DNS queries, and
handle some of them one way, and some of them another way.  In this
case, you want queries for <www.google.com<http://www.google.com>.> to be 
answered with a
CNAME (or directed to an in-house server that will answer that way),
while queries for other domain names are forwarded normally.

 I believe you can use ISC BIND's Response Policy feature for this.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to