Block a website

[polymath5]

On a WS2003 DNS server how exactly do I prevent users from accessing a particular website. the website is songlyrics.com as soon as you hit this you are infected with virus and pop installers and a lot of junk. I don't want any of my users to be able to get to this site.

I believe it can be done with DNS, but I'm new to setting up records and would appreciate some detailed guidance.

Thanks VERY much!

=============
Mens et Manus
=============

 

[GlenJohnson]

How many users? You could always write a batch file that would load this on the users hosts file on startup.

127.0.0.2

http://www.songlyrics.com

#Can't get there from here.

Despite all the internet's glory, all machines still look at there hosts files first. If it sees the site name, it will try and resolve to 127.0.0.2, which it won't be able to do. Good luck.

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin feel free to join the Tek-Tips in Chicago, Illinois Forum.

TTinChicago
Johnson Computers

 

[polymath5]

Tried that on the workstation. Didn't work. Still found the site. I deleted temp files, rebooted, etc .still no good.

Thanks very much for your help and ideas on this!

=============
Mens et Manus
=============

 

[Serbtastic]

Did you set both

http://www.songlyrics.com

AND songlyrics.com to the local loopback address in the local hosts file?

127.0.0.1 songlyrics.com

http://www.songlyrics.com

FYI Glen, you can set the name resolution order to be used on Unix machines (eg. On Solaris by using the nsswitch.conf file) so that DNS is used before a local hosts file.

 

[ChrisAC]

If your users are using your internal DNS server then just make that server authoratative for the zone songlyrics.com and then just don't put any records in there or put some junk data in.

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[polymath5]

I did put in
127.0.0.2

http://www.songlyrics.com

and
127.0.0.2 songlyrics.com

Chris, that's exactly what I need to do. What are the steps for doing that on a 2k3 server?

Also, shouldn't it be 127.0.0.1 not .2?

Thanks!



=============
Mens et Manus
=============

 

[ChrisAC]

Sorry, I've never used Windows DNS so I can't help there. I only use BIND.

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************