Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!feeder2.ecngs.de!ecngs!feeder.ecngs.de!81.171.118.63.MISMATCH!peer03.fr7!news.highwinds-media.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Tim Watts Newsgroups: uk.d-i-y,uk.comp.os.linux,comp.os.linux.misc Subject: Re: Parental guardian - internet (WEB) filtering Date: Wed, 01 Apr 2015 00:19:38 +0100 Lines: 47 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Trace: individual.net VNmCImd/+1FkLp7uy3EiaAqWFgQ1m3gZ4epvCVjRjtYuH5qmBq X-Orig-Path: squidward.dionic.net!not-for-mail Cancel-Lock: sha1:3aP556vwQup7F06KZhi9UWG5UcI= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 In-Reply-To: X-Received-Bytes: 2174 X-Received-Body-CRC: 692095866 Xref: csiph.com comp.os.linux.misc:14297 On 31/03/15 23:46, john james wrote: > > > "Tim Watts" wrote in message > news:n9frub-kpi.ln1@squidward.dionic.net... >> On 31/03/15 20:59, john james wrote: >>> >>> Don’t forget who will be picking your nursing home. >> >> I will... > > We'll see... > > My dad thought that. He didn’t. Hmm - the lack of "do it this way" responses suggests this needs a novel solution. Thanks folks - just checking I was not missing something obvious. OK - I think the final solution will maybe look like: My DNS -> Split views, ie a different view based on client IP (I do this already, nice feature of Bind9) - VLAN 1+2 resolve normally. VLAN 3+4 by default pass non local-authoritative queries to OpenDNS subscription service for filtering. But I try to define zones for netflix.com (and any supporting ones, not sure it it uses akamai or similar, but a bit of tcpdum will tell me) - these zones are defiend locally as forwarder zones aka: zone "netflix.com" IN { type forward; forwarders { ; }; }; I think that might work - Only one way - just have to try it.