DNS Whitelist Project
-
Hello,
I am currently developing a DNS Whitelist project to integrate with my pfsense router. I have three kids and this is a step in securing our network from their wandering browsers. The core concept is implementable on whatever hardware or software. Right now I am focusing on pfsense.
If anyone has experience, or wants to gain experience, building this sort of project please let me know.Thanks,
-Daniel Ayer -
I'd use a blacklist with pfBlockerNG with one of the following lists, seems pointless reinventing the wheel:-
https://github.com/StevenBlack/hosts/blob/master/alternates/fakenews-gambling-porn-social/readme.md
It works fine for me:-
Last login: Thu Jan 5 19:31:26 on console
andy@mac-pro ~ % host pornhub.com
pornhub.com has address 172.31.255.2
Host pornhub.com not found: 2(SERVFAIL)
Host pornhub.com not found: 2(SERVFAIL)
andy@mac-pro ~ %
-
@danielayer said in DNS Whitelist Project:
DNS Whitelist project
Easy answer : you can't.
Making a list with allowed DNS hosts is impossible as it will take unimaginable resources to store this file (or even creating it).
And the moment you have it, it's already outdated, as thousands of new hosts have been created, and some have expired.
"whitelisting" the Internet is like managing a list with all the phone numbers on planet earth.The way doing things is using lists with sites you don't want to access
( I know, I knew you meant to do that )The good news is : these lists already exist.
That's one of the reasons why the pfBlockerng-devel pfSense project has been created.Btw : small detail :
Go for "Null blocking (logging).
Like this :
The idea of showing a web page that informs the user he wanted to visit a site that is blocked doesn't work for 99,99 % of all cases.
The 0,001 % are the sites that are still http (not https). The number tells you : they don't exist anymore.
