Block ip address in DNS Server

[bkonner]

Howdy,

In my DNS server I want to block an ip address. Here is my problem. I am a network administrator in a school system. I need to block a web page that students have many dns names covering it. I know how to do this on the Unix side of the network, but I can not figure out how to block it on the W2K DNS server.

I need to create an entry that sends all packets to 127.0.0.0 (no where). How can I do this in the DNS server.

Thanks,

bkonner

 

[CharlieJax]

Easy route, block it at the router or proxy server.

Not sure on the DNS, but perhaps just a CNAME entry? CJ

Don't drink and post, save that for driving home!

 

[eightball]

I don't know enough how your DNS is setup in Win2k. I assume that root hints are avail? Maybe you also have DNS forwarders enabled? If so DNS entry is not the best solution. Do you have a proxy or a firewall? you could set a rule to block unwanted traffic there. this is the best way to accomplish the task at hand. If this is not an option you can do what you talked about by creating an A Record pointing to the loopback. This may still be resovled, because of DNS forwarding and root hints. Is the webpage an internal webpage? If it is then your solution should work for sure.