Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Bypassing Host Overrides for certain times and for certain clients

    Scheduled Pinned Locked Moved DHCP and DNS
    6 Posts 3 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      dylanjhall
      last edited by

      Hello,

      I have setup my pfsense router to enforce safe search for google and youtube. In the DNS resolver page I have added an Host Override entry for Youtube. I have also add text in the custom settings  - server:
      include: /var/unbound/safesearch.conf

      Everything works fine but my kids are complaining that some of the youtube videos they want to watch that appear 'safe' are being blocked. I have verified this. Even videos they have uploaded themselves are blocked.

      I understand that no filter is perfect so I was wondering if there is a way to enable and disable the Host override at various times of day?
      Would it possible to allow certain clients to bypass the Overrides (e.g. computer in living room)

      1 Reply Last reply Reply Quote 0
      • cwagzC Offline
        cwagz
        last edited by

        @dylanjhall:

        Hello,

        I have setup my pfsense router to enforce safe search for google and youtube. In the DNS resolver page I have added an Host Override entry for Youtube. I have also add text in the custom settings  - server:
        include: /var/unbound/safesearch.conf

        Everything works fine but my kids are complaining that some of the youtube videos they want to watch that appear 'safe' are being blocked. I have verified this. Even videos they have uploaded themselves are blocked.

        I understand that no filter is perfect so I was wondering if there is a way to enable and disable the Host override at various times of day?
        Would it possible to allow certain clients to bypass the Overrides (e.g. computer in living room)

        I came here wondering the same thing.  Or even if their was just a quick way to disable the overrides with a checkbox.  Right now you have to delete them and then re-enter them.

        2017-07-18_19-19-46.png
        2017-07-18_19-19-46.png_thumb

        Netgate 6100 MAX

        1 Reply Last reply Reply Quote 0
        • cwagzC Offline
          cwagz
          last edited by

          This has helped with my kids.  I put Youtube in "moderate" mode.  This allows much more stuff like The Backyard Scientist and other things they were missing.

          2017-08-05_11-22-43.png
          2017-08-05_11-22-43.png_thumb

          Netgate 6100 MAX

          1 Reply Last reply Reply Quote 0
          • D Offline
            dylanjhall
            last edited by

            I really appreciate your responses. Evidence has shown me that I really need to monitor and restrict the content on my network. I want my kids to have freedom to enjoy Youtube, etc. but the content they can stumble upon may not always be up building.
            Building the network has been a challenge but I think it is worthwhile

            1 Reply Last reply Reply Quote 0
            • XentrkX Offline
              Xentrk
              last edited by

              I use opendns combined with dns-o-matic at two sites I support to block web content by category. Not sure if the OpenDNS solution will help for your use case. It is free. I like the ease of use and the stats report.

              pfSense 2.4.4_2 | Intel i5-3450 @ 3.10GHz  | AES-NI enabled |  pfBlockerNG | Snort
              Blog Site: https://x3mtek.com || GitHub: https://github.com/Xentrk

              1 Reply Last reply Reply Quote 0
              • D Offline
                dylanjhall
                last edited by

                I use OpendDNS. I have used OpenDNS. It is very good at blocking content by category and blocking specific sites. However, when it comes to Google web browser , especially the incognito mode, OpenDNS does not enforce safe search. So they can google any image they want. The same for Youtube. Once they have logged into google they can access nsfw and porn that Youtube has not removed.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.