Re: Bind and blacklist IP file

2010-10-13 Thread Andrey G. Sergeev
Hello Alans, Tue, 12 Oct 2010 16:52:15 +0300 Alans wrote: On 10/12/2010 03:44 PM, Andrey G. Sergeev (AKA Andris) wrote: Hello Ian, Tue, 12 Oct 2010 10:54:19 +0100 Ian Tait wrote: Ok, but you can always browse by IP address and in this case there is no DNS server than can stop you from

Re: Bind and blacklist IP file

2010-10-13 Thread Andrey G. Sergeev
Hello David, Mon, 11 Oct 2010 18:38:24 -0400 David Miller wrote: On 10/11/2010 3:26 PM, Andrey G. Sergeev (AKA Andris) wrote: Hello Alans, Mon, 11 Oct 2010 20:07:40 +0300 Alans wrote: Why not? OpenDNS is a good example i think. Good example? Was it a joke? Do the traceroute on IP

Re: Bind and blacklist IP file

2010-10-13 Thread Kalman Feher
On 13/10/10 12:13 PM, Andrey G. Sergeev and...@aernet.ru wrote: Hello Alans, Tue, 12 Oct 2010 16:52:15 +0300 Alans wrote: On 10/12/2010 03:44 PM, Andrey G. Sergeev (AKA Andris) wrote: Hello Ian, Tue, 12 Oct 2010 10:54:19 +0100 Ian Tait wrote: Ok, but you can always browse by

RE: Bind and blacklist IP file

2010-10-12 Thread Ian Tait
: Bind and blacklist IP file snip Ok, but you can always browse by IP address and in this case there is no DNS server than can stop you from browsing what you want. Vaguely related, are host headers - a lot of webservers share an IP address/many IP addresses and use host headers to 'display

Re: Bind and blacklist IP file

2010-10-12 Thread Andrey G. Sergeev (AKA Andris)
Hello Ian, Tue, 12 Oct 2010 10:54:19 +0100 Ian Tait wrote: Ok, but you can always browse by IP address and in this case there is no DNS server than can stop you from browsing what you want. Vaguely related, are host headers - a lot of webservers share an IP address/many IP addresses and

Re: Bind and blacklist IP file

2010-10-12 Thread Alans
On 10/12/2010 03:44 PM, Andrey G. Sergeev (AKA Andris) wrote: Hello Ian, Tue, 12 Oct 2010 10:54:19 +0100 Ian Tait wrote: Ok, but you can always browse by IP address and in this case there is no DNS server than can stop you from browsing what you want. Vaguely related, are host headers - a

Re: Bind and blacklist IP file

2010-10-12 Thread Sam Wilson
In article mailman.447.1286891555.555.bind-us...@lists.isc.org, Alans alans...@gmail.com wrote: [ Norwegian Gov vs ISPs, banning domains, and inserting local host entries to subvert such a ban ] Even this way, you should know all the IP of subdomains to work properly. Try it for

Re: Bind and blacklist IP file

2010-10-11 Thread Kalman Feher
On 11/10/10 1:02 PM, Alans alans...@gmail.com wrote: Hello, Is it possible for bind dns to check the queries, if the returned answer is existed in a file that contains blacklisted IPs then block it? DNS RPZ may do what you want. There is a patch on the isc.org website for 9.4,9.6

Re: Bind and blacklist IP file

2010-10-11 Thread Alans
Thanks Dave, yes i know about OpenDNS, I'm trying to imlement somehting kind of similar to that in a small scale. So i was wondering about Bind dns capabilities and may be third party stuffs that could integrate with bind dns in addition to the ip/website list. regards, Alans On 10/11/2010

Re: Bind and blacklist IP file

2010-10-11 Thread Lyle Giese
Alans wrote: Hello, Is it possible for bind dns to check the queries, if the returned answer is existed in a file that contains blacklisted IPs then block it? One more thing, from where we can get/buy updated lists of categorized IPs/websites, like Gaming, Porn, Social...? Thanks, Alans

Re: Bind and blacklist IP file

2010-10-11 Thread Matus UHLAR - fantomas
On 11.10.10 14:16, Alans wrote: Thanks Dave, yes i know about OpenDNS, I'm trying to imlement somehting kind of similar to that in a small scale. So i was wondering about Bind dns capabilities and may be third party stuffs that could integrate with bind dns in addition to the ip/website

Re: Bind and blacklist IP file

2010-10-11 Thread Alans
Why not? OpenDNS is a good example i think. Also, i think as mentioned in Kal's email, DNS RPZ from isc is an approach to implement these functionalities at DNS level. We want to give individuals/customers access to their account to block what they want to block, something similar to OpenDNS

Re: Bind and blacklist IP file

2010-10-11 Thread sthaug
Thanks Dave, yes i know about OpenDNS, I'm trying to imlement somehting kind of similar to that in a small scale. So i was wondering about Bind dns capabilities and may be third party stuffs that could integrate with bind dns in addition to the ip/website list. This is NOT

Re: Bind and blacklist IP file

2010-10-11 Thread Nuno Paquete
Hi. This is NOT something BIND (or any DNS server) should do. Blocking web sites is business for web proxies, firewalls etc. Doing this stuff at DNS level could lead to many surprises. I definetly agree with this. In Norway we have what is basically a government requirement for ISPs to

Re: Bind and blacklist IP file

2010-10-11 Thread Andrey G. Sergeev (AKA Andris)
Hello Matus, Mon, 11 Oct 2010 18:37:43 +0200 Matus UHLAR - fantomas wrote: On 11.10.10 14:16, Alans wrote: Thanks Dave, yes i know about OpenDNS, I'm trying to imlement somehting kind of similar to that in a small scale. So i was wondering about Bind dns capabilities and may be third

Re: Bind and blacklist IP file

2010-10-11 Thread Kevin Darcy
On 10/11/2010 2:44 PM, Nuno Paquete wrote: Ok, but you can always browse by IP address and in this case there is no DNS server than can stop you from browsing what you want. If you want to block IP address access you have to use firewall, or if you are talking about http traffic and have a

Re: Bind and blacklist IP file

2010-10-11 Thread Andrey G. Sergeev (AKA Andris)
Hello Steinar, Mon, 11 Oct 2010 19:38:54 +0200 (CEST) sth...@nethelp.no wrote: Unfortunately, in some countries you may be required to do so. The example I know best is, naturally, Norway. In Norway we have what is basically a government requirement for ISPs to block child porn domains,

Re: Bind and blacklist IP file

2010-10-11 Thread Andrey G. Sergeev (AKA Andris)
Hello Alans, Mon, 11 Oct 2010 20:07:40 +0300 Alans wrote: Why not? OpenDNS is a good example i think. Good example? Was it a joke? Do the traceroute on IP addresses of the two OpenDNS resolvers and you'll find that they both are behind the same router. Do you still trust the OpenDNS people

Re: Bind and blacklist IP file

2010-10-11 Thread David Miller
On 10/11/2010 3:26 PM, Andrey G. Sergeev (AKA Andris) wrote: Hello Alans, Mon, 11 Oct 2010 20:07:40 +0300 Alans wrote: Why not? OpenDNS is a good example i think. Good example? Was it a joke? Do the traceroute on IP addresses of the two OpenDNS resolvers and you'll find that they both are