I haven't used untangle. I think one way to do this is to redirect to the proper server based on customer IP, etc. Thinking Mikrotik, because that is what I use, redirecting all of a customer's DNS request to the proper internal server would be an easy firewall rule. The internal server, which could be a really small box doing DNS caching only, would have an address that OpenDNS knows and therefore OpenDNS would return the proper thing for that customer. Only problem I see with this right now is the need for one server per filtering setup. It does eliminate the need for all customers to have public addresses. Only the internal servers need that. Makes changing a customers rule set as easy as changing the redirect.
Jason Hensley wrote: > Kinda what I was thinking was that if they wanted to utilize the filtering > then we would assign them DNS servers specific for OpenDNS, otherwise, they > would get normal service. > > This could easily be done at the CPE / Authentication level with PPPoE. > Now, the issue would be like Josh mentioned, if they had manual DNS servers > configured in their computer. We would definitely have to intercept that > traffic and redirect all DNS queries to the OpenDNS servers. > > Just a thought. I have, in the past, had clients request this service. > Been awhile but thought that could be one more value-add that we could have > in the box to help bring a little more revenue in. > > Anyone used Untangle in an app like this? > > > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of Israel Lopez-LISTS > Sent: Friday, August 14, 2009 2:41 PM > To: WISPA General List > Subject: Re: [WISPA] Client Internet Filtering Upgrade - WAS: Content Filter > Suggestion for School > > FYI.. Not every site will want to have the same filter settings. Since > you can define multiple networks in OpenDNS, the IP will have to > originate from that network to get a specific set of content-filtering. > If the request originates from the local DNS server, then you've just > inadvertently applied those settings to everyone who might query that > DNS server. > > So you would have to force these 'filtered' networks to only request DNS > from OpenDNS servers, and make sure each client has a public IP. > > -IL > > Josh Luthman wrote: > >> I just thought about "how to get around this" and I wanted to share my >> thoughts. If a location needs this filtering and you use opendns you'll >> want to drop all forwarded DNS traffic. Force everyone to use an internal >> DNS server which in turn looks up via OpenDNS. >> >> Josh Luthman >> Office: 937-552-2340 >> Direct: 937-552-2343 >> 1100 Wayne St >> Suite 1337 >> Troy, OH 45373 >> >> "When you have eliminated the impossible, that which remains, however >> improbable, must be the truth." >> --- Sir Arthur Conan Doyle >> >> >> On Fri, Aug 14, 2009 at 2:33 PM, Jason Hensley <[email protected]> >> > wrote: > >> >> >>> On this same subject, anyone offering "upgrades" for filtered Internet >>> service to their clients? Anyone using OpenDNS to do this? >>> >>> >>> >>> -----Original Message----- >>> From: [email protected] [mailto:[email protected]] On >>> Behalf Of ccrum >>> Sent: Friday, August 14, 2009 1:29 PM >>> To: [email protected]; WISPA General List >>> Subject: Re: [WISPA] Content Filter Suggestion for School >>> >>> OpenDNS is approved for this...best thing is it is free. >>> >>> Cameron >>> >>> Scott Carullo wrote: >>> >>> >>>> I need a web content filter for K-12 school. Paid Subscription ok. >>>> >>>> Please let me know what good products there are for this requirement. >>>> >>>> >>> Need >>> >>> >>>> asap. Thanks... >>>> >>>> Scott Carullo >>>> Brevard Wireless >>>> 321-205-1100 x102 >>>> >>>> >>>> >>>> >>>> >>>> > ---------------------------------------------------------------------------- > >>> ---- >>> >>> >>>> WISPA Wants You! Join today! >>>> http://signup.wispa.org/ >>>> >>>> >>>> > ---------------------------------------------------------------------------- > >>> ---- >>> >>> >>>> WISPA Wireless List: [email protected] >>>> >>>> Subscribe/Unsubscribe: >>>> http://lists.wispa.org/mailman/listinfo/wireless >>>> >>>> Archives: http://lists.wispa.org/pipermail/wireless/ >>>> >>>> >>>> >>>> >>>> >>> >>> > ---------------------------------------------------------------------------- > >>> ---- >>> WISPA Wants You! Join today! >>> http://signup.wispa.org/ >>> >>> >>> > ---------------------------------------------------------------------------- > >>> ---- >>> >>> WISPA Wireless List: [email protected] >>> >>> Subscribe/Unsubscribe: >>> http://lists.wispa.org/mailman/listinfo/wireless >>> >>> Archives: http://lists.wispa.org/pipermail/wireless/ >>> >>> >>> >>> >>> >>> > ---------------------------------------------------------------------------- > ---- > >>> WISPA Wants You! Join today! >>> http://signup.wispa.org/ >>> >>> >>> > ---------------------------------------------------------------------------- > ---- > >>> WISPA Wireless List: [email protected] >>> >>> Subscribe/Unsubscribe: >>> http://lists.wispa.org/mailman/listinfo/wireless >>> >>> Archives: http://lists.wispa.org/pipermail/wireless/ >>> >>> >>> >> >> > ---------------------------------------------------------------------------- > ---- > >> WISPA Wants You! Join today! >> http://signup.wispa.org/ >> >> > ---------------------------------------------------------------------------- > ---- > >> >> WISPA Wireless List: [email protected] >> >> Subscribe/Unsubscribe: >> http://lists.wispa.org/mailman/listinfo/wireless >> >> Archives: http://lists.wispa.org/pipermail/wireless/ >> >> > > > > ---------------------------------------------------------------------------- > ---- > WISPA Wants You! Join today! > http://signup.wispa.org/ > ---------------------------------------------------------------------------- > ---- > > WISPA Wireless List: [email protected] > > Subscribe/Unsubscribe: > http://lists.wispa.org/mailman/listinfo/wireless > > Archives: http://lists.wispa.org/pipermail/wireless/ > > > > -------------------------------------------------------------------------------- > WISPA Wants You! Join today! > http://signup.wispa.org/ > -------------------------------------------------------------------------------- > > WISPA Wireless List: [email protected] > > Subscribe/Unsubscribe: > http://lists.wispa.org/mailman/listinfo/wireless > > Archives: http://lists.wispa.org/pipermail/wireless/ > > ------------------------------------------------------------------------ > > > No virus found in this incoming message. > Checked by AVG - www.avg.com > Version: 8.5.392 / Virus Database: 270.13.56/2302 - Release Date: 08/14/09 > 06:10:00 > > -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: [email protected] Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
