 




<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: How can I block websites in local DNS</title>
	<atom:link href="http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/feed/" rel="self" type="application/rss+xml" />
	<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/</link>
	<description></description>
	<lastBuildDate>Sat, 18 May 2013 14:11:18 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
	<item>
		<title>By: petkoa</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/#comment-96210</link>
		<dc:creator>petkoa</dc:creator>
		<pubDate>Tue, 06 Sep 2011 13:09:12 +0000</pubDate>
		<guid isPermaLink="false">#comment-96210</guid>
		<description><![CDATA[Thanks, Carlos - and Saturno, to that matter!]]></description>
		<content:encoded><![CDATA[<p>Thanks, Carlos &#8211; and Saturno, to that matter!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: carlosdl</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/#comment-96166</link>
		<dc:creator>carlosdl</dc:creator>
		<pubDate>Mon, 05 Sep 2011 14:35:11 +0000</pubDate>
		<guid isPermaLink="false">#comment-96166</guid>
		<description><![CDATA[Done (answer approved), Petko.]]></description>
		<content:encoded><![CDATA[<p>Done (answer approved), Petko.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ciscoone</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/#comment-95101</link>
		<dc:creator>ciscoone</dc:creator>
		<pubDate>Tue, 09 Aug 2011 07:37:12 +0000</pubDate>
		<guid isPermaLink="false">#comment-95101</guid>
		<description><![CDATA[I may be wrong and I&#039;m not sure how much access you have to your network or what type of equipment you are running but wouldn&#039;t it be easier to place a few ACL&#039;s on your router?]]></description>
		<content:encoded><![CDATA[<p>I may be wrong and I&#8217;m not sure how much access you have to your network or what type of equipment you are running but wouldn&#8217;t it be easier to place a few ACL&#8217;s on your router?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: kdubb</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/#comment-94779</link>
		<dc:creator>kdubb</dc:creator>
		<pubDate>Thu, 28 Jul 2011 18:45:06 +0000</pubDate>
		<guid isPermaLink="false">#comment-94779</guid>
		<description><![CDATA[Opendns.com]]></description>
		<content:encoded><![CDATA[<p>Opendns.com</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: saturno</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/#comment-94729</link>
		<dc:creator>saturno</dc:creator>
		<pubDate>Wed, 27 Jul 2011 22:46:26 +0000</pubDate>
		<guid isPermaLink="false">#comment-94729</guid>
		<description><![CDATA[Hello,

Everyone please don&#039;t get me wrong, but I really need to put this answer like this:

Please don&#039;t fool yourself with the idea of blocking anything within name resolution (DNS)!

If you want to block access to / from a network, you really need a full featured proxy and a state-full firewall.
Note that I&#039;m not saying that you need to buy anything, though.
As everyone know, we get what we pay for; but you can achieve a good level of protection with completely free products. (more on that later if you need)

Please post back if you need further help.]]></description>
		<content:encoded><![CDATA[<p>Hello,</p>
<p>Everyone please don&#8217;t get me wrong, but I really need to put this answer like this:</p>
<p>Please don&#8217;t fool yourself with the idea of blocking anything within name resolution (DNS)!</p>
<p>If you want to block access to / from a network, you really need a full featured proxy and a state-full firewall.<br />
Note that I&#8217;m not saying that you need to buy anything, though.<br />
As everyone know, we get what we pay for; but you can achieve a good level of protection with completely free products. (more on that later if you need)</p>
<p>Please post back if you need further help.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mariodlg</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/#comment-94355</link>
		<dc:creator>mariodlg</dc:creator>
		<pubDate>Tue, 19 Jul 2011 20:25:43 +0000</pubDate>
		<guid isPermaLink="false">#comment-94355</guid>
		<description><![CDATA[I think restricted sites may help a little, but due the exist of many other browsers like Chrome, Firefox, Safari, this solution maybe is not what you need.

Maybe if we know what type of DNS software you are using we can give you better options.
Other thing you must consider is the fact some users can put IP entries in their hosts file if they actually know the IP address of the website you intend to block in order to jump the dns service.

I think a firewall or a content filter are better options.
If you like open source solutions take a look at &lt;a href=&quot;http://www.clearfoundation.com/&quot;&gt;ClearOS&lt;/a&gt;, a linux based solution for enterprises.
Another recomendation could be &lt;a href=&quot;http://www.watchguard.com/&quot;&gt;Watchguard&lt;/a&gt;, a paid solution.

Regards.]]></description>
		<content:encoded><![CDATA[<p>I think restricted sites may help a little, but due the exist of many other browsers like Chrome, Firefox, Safari, this solution maybe is not what you need.</p>
<p>Maybe if we know what type of DNS software you are using we can give you better options.<br />
Other thing you must consider is the fact some users can put IP entries in their hosts file if they actually know the IP address of the website you intend to block in order to jump the dns service.</p>
<p>I think a firewall or a content filter are better options.<br />
If you like open source solutions take a look at <a href="http://www.clearfoundation.com/">ClearOS</a>, a linux based solution for enterprises.<br />
Another recomendation could be <a href="http://www.watchguard.com/">Watchguard</a>, a paid solution.</p>
<p>Regards.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: erroneousgiant</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/#comment-94330</link>
		<dc:creator>erroneousgiant</dc:creator>
		<pubDate>Tue, 19 Jul 2011 13:44:32 +0000</pubDate>
		<guid isPermaLink="false">#comment-94330</guid>
		<description><![CDATA[You really should have some kind of web filtering in place through something dedicated to the task.

It will improve general security and help with situations like this.

Do you have ISA? also another good place to block traffic from. You could put an entry in your DNS that refers the address to something else but it&#039;s not advised. I would go with Gabe9527&#039;s suggestion for a short term fix.

If users figure out you&#039;ve blocked it they can still get around this using a proxy avoidance website.]]></description>
		<content:encoded><![CDATA[<p>You really should have some kind of web filtering in place through something dedicated to the task.</p>
<p>It will improve general security and help with situations like this.</p>
<p>Do you have ISA? also another good place to block traffic from. You could put an entry in your DNS that refers the address to something else but it&#8217;s not advised. I would go with Gabe9527&#8242;s suggestion for a short term fix.</p>
<p>If users figure out you&#8217;ve blocked it they can still get around this using a proxy avoidance website.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: gabe9527</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/how-can-i-block-websites-in-local-dns/#comment-94329</link>
		<dc:creator>gabe9527</dc:creator>
		<pubDate>Tue, 19 Jul 2011 13:26:09 +0000</pubDate>
		<guid isPermaLink="false">#comment-94329</guid>
		<description><![CDATA[Add restircted sites to IE via a Group Policy.]]></description>
		<content:encoded><![CDATA[<p>Add restircted sites to IE via a Group Policy.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Page Caching using memcached
Database Caching 3/8 queries in 0.043 seconds using memcached
Object Caching 367/368 objects using memcached

Served from: itknowledgeexchange.techtarget.com @ 2013-05-18 16:12:20 -->