Re: Bind and blacklist IP file

2010-10-13 Thread Michael Sinatra
On 10/13/10 03:24, Andrey G. Sergeev wrote: Hello David, Mon, 11 Oct 2010 18:38:24 -0400 David Miller wrote: On 10/11/2010 3:26 PM, Andrey G. Sergeev (AKA Andris) wrote: Hello Alans, Mon, 11 Oct 2010 20:07:40 +0300 Alans wrote: Why not? OpenDNS is a good example i think. Good example

Re: Bind and blacklist IP file

2010-10-13 Thread Kalman Feher
On 13/10/10 12:13 PM, "Andrey G. Sergeev" wrote: > Hello Alans, > > > Tue, 12 Oct 2010 16:52:15 +0300 Alans wrote: > >> On 10/12/2010 03:44 PM, Andrey G. Sergeev (AKA Andris) wrote: >>> Hello Ian, >>> >>> >>> Tue, 12 Oct 2010 10:54:19 +0100 "Ian Tait" wrote: >>> > Ok, but you can alw

Re: Bind and blacklist IP file

2010-10-13 Thread Andrey G. Sergeev
Hello David, Mon, 11 Oct 2010 18:38:24 -0400 David Miller wrote: > On 10/11/2010 3:26 PM, Andrey G. Sergeev (AKA Andris) wrote: >> Hello Alans, >> >> >> Mon, 11 Oct 2010 20:07:40 +0300 Alans wrote: >> >>> Why not? OpenDNS is a good example i think. >> Good example? Was it a joke? Do the tracer

Re: Bind and blacklist IP file

2010-10-13 Thread Andrey G. Sergeev
Hello Alans, Tue, 12 Oct 2010 16:52:15 +0300 Alans wrote: > On 10/12/2010 03:44 PM, Andrey G. Sergeev (AKA Andris) wrote: >> Hello Ian, >> >> >> Tue, 12 Oct 2010 10:54:19 +0100 "Ian Tait" wrote: >> Ok, but you can always browse by IP address and in this case there is no DNS server than

Re: Bind and blacklist IP file

2010-10-12 Thread Sam Wilson
In article , Alans wrote: > [ Norwegian Gov vs ISPs, banning domains, and inserting local host >entries to subvert such a ban ] > > Even this way, you should know all the IP of subdomains to work > properly. Try it for facebook, open homepage fine but once you login it > will fail. > Anoth

Re: Bind and blacklist IP file

2010-10-12 Thread Alans
On 10/12/2010 03:44 PM, Andrey G. Sergeev (AKA Andris) wrote: Hello Ian, Tue, 12 Oct 2010 10:54:19 +0100 "Ian Tait" wrote: Ok, but you can always browse by IP address and in this case there is no DNS server than can stop you from browsing what you want. Vaguely related, are host headers - a

Re: Bind and blacklist IP file

2010-10-12 Thread Andrey G. Sergeev (AKA Andris)
Hello Ian, Tue, 12 Oct 2010 10:54:19 +0100 "Ian Tait" wrote: >> Ok, but you can always browse by IP address and in this case there >> is no DNS server than can stop you from browsing what you want. > > Vaguely related, are host headers - a lot of webservers share an IP > address/many IP address

RE: Bind and blacklist IP file

2010-10-12 Thread Ian Tait
: Bind and blacklist IP file >Ok, but you can always browse by IP address and in this case there is no DNS server than can stop you from >browsing what you want. Vaguely related, are host headers - a lot of webservers share an IP address/many IP addresses and use host headers to 'd

Re: Bind and blacklist IP file

2010-10-11 Thread David Miller
On 10/11/2010 3:26 PM, Andrey G. Sergeev (AKA Andris) wrote: Hello Alans, Mon, 11 Oct 2010 20:07:40 +0300 Alans wrote: Why not? OpenDNS is a good example i think. Good example? Was it a joke? Do the traceroute on IP addresses of the two OpenDNS resolvers and you'll find that they both are b

Re: Bind and blacklist IP file

2010-10-11 Thread Andrey G. Sergeev (AKA Andris)
Hello Alans, Mon, 11 Oct 2010 20:07:40 +0300 Alans wrote: > Why not? OpenDNS is a good example i think. Good example? Was it a joke? Do the traceroute on IP addresses of the two OpenDNS resolvers and you'll find that they both are behind the same router. Do you still trust the OpenDNS people wh

Re: Bind and blacklist IP file

2010-10-11 Thread Andrey G. Sergeev (AKA Andris)
Hello Steinar, Mon, 11 Oct 2010 19:38:54 +0200 (CEST) sth...@nethelp.no wrote: > Unfortunately, in some countries you may be required to do so. The > example I know best is, naturally, Norway. > > In Norway we have what is basically a government requirement for ISPs > to block child porn domain

Re: Bind and blacklist IP file

2010-10-11 Thread Kevin Darcy
On 10/11/2010 2:44 PM, Nuno Paquete wrote: Ok, but you can always browse by IP address and in this case there is no DNS server than can stop you from browsing what you want. If you want to block IP address access you have to use firewall, or if you are talking about http traffic and have a pro

Re: Bind and blacklist IP file

2010-10-11 Thread Andrey G. Sergeev (AKA Andris)
Hello Matus, Mon, 11 Oct 2010 18:37:43 +0200 Matus UHLAR - fantomas wrote: > On 11.10.10 14:16, Alans wrote: >> Thanks Dave, yes i know about OpenDNS, I'm trying to imlement >> somehting kind of similar to that in a small scale. >> So i was wondering about Bind dns capabilities and may be third

Re: Bind and blacklist IP file

2010-10-11 Thread Nuno Paquete
Hi. This is NOT something BIND (or any DNS server) should do. Blocking web sites is business for web proxies, firewalls etc. Doing this stuff at DNS level could lead to many surprises. I definetly agree with this. In Norway we have what is basically a government requirement for ISPs to b

Re: Bind and blacklist IP file

2010-10-11 Thread sthaug
> > Thanks Dave, yes i know about OpenDNS, I'm trying to imlement somehting > > kind of similar to that in a small scale. > > So i was wondering about Bind dns capabilities and may be third party > > stuffs that could integrate with bind dns in addition to the ip/website > > list. > > This i

Re: Bind and blacklist IP file

2010-10-11 Thread Alans
Why not? OpenDNS is a good example i think. Also, i think as mentioned in Kal's email, DNS RPZ from isc is an approach to implement these functionalities at DNS level. We want to give individuals/customers access to their account to block what they want to block, something similar to OpenDNS b

Re: Bind and blacklist IP file

2010-10-11 Thread Matus UHLAR - fantomas
On 11.10.10 14:16, Alans wrote: > Thanks Dave, yes i know about OpenDNS, I'm trying to imlement somehting > kind of similar to that in a small scale. > So i was wondering about Bind dns capabilities and may be third party > stuffs that could integrate with bind dns in addition to the ip/website

Re: Bind and blacklist IP file

2010-10-11 Thread Lyle Giese
Alans wrote: > Hello, > > Is it possible for bind dns to check the queries, if the returned answer > is existed in a file that contains blacklisted IPs then block it? > > One more thing, from where we can get/buy updated lists of categorized > IPs/websites, > like Gaming, Porn, Social...? > > Thank

Re: Bind and blacklist IP file

2010-10-11 Thread Alans
Thanks Dave, yes i know about OpenDNS, I'm trying to imlement somehting kind of similar to that in a small scale. So i was wondering about Bind dns capabilities and may be third party stuffs that could integrate with bind dns in addition to the ip/website list. regards, Alans On 10/11/2010 02

Re: Bind and blacklist IP file

2010-10-11 Thread Kalman Feher
On 11/10/10 1:02 PM, "Alans" wrote: > > Hello, > > Is it possible for bind dns to check the queries, if the returned answer > is existed in a file that contains blacklisted IPs then block it? DNS RPZ may do what you want. There is a patch on the isc.org website for 9.4,9.6 and 9.7.1-P2