Hello Patrick,
I think, the best would be to set up a squid proxy server.
You should then configure the firewall so that only the proxy server can
"browse" on port 80.
On the proxy server, you can easily configure access groups and allow or
deny URL regular expressions.
But you know, if you allow google and deny all other domains, the users
won't be able to follow links in google's search results?
Regards,
Michel
Patrick Useldinger schrieb:
Hello,
I am looking for a DNS proxy that allows me to filter which DNS
requests are answered and which ones are dropped.
The software should allow me to specify something like this:
192.168.1.5 "www.yahoo.com","www.google.com"
192.168.1.6 "www.google.com"
meaning that the first machine is allowed to resolve the specified 2
names, and the second only "www.google.com".
Reverse lookups, zone transfers and all kind of "browsing" must be
blocked.
I have looked at the bind documentation and although I found the view
concept, this does not appear to allow me to specify a list of allowed
names. Nor have I found an application-level firewall which
understands DNS records.
Does anybody know of such a software?
-pu
_______________________________________________
Lilux-help mailing list
Lilux-help(a)lilux.lu
http://lilux.lu/mailman/listinfo/lilux-help