Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Is it possible to set up CNAME lookups with Unbound pkg for google safe search?

    DHCP and DNS
    3
    3
    2415
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      goldstrom last edited by

      I'm trying to figure out how to do this on my pfSense box (2.1.5) in a home / family environment that's been running pretty well for about 3 years. I just added the Unbound pkg, but have not activated it yet.
      Based on Google's instructions, I'm trying to do this:
      "Add a new CNAME record on your local DNS server for your local Google domain(s) pointing to forcesafesearch.google.com. For this example, we will be using www.google.com. Create a CNAME record for www.google.com that points to forcesafesearch.google.com"
      Appreciate any help!

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        That type of CNAME requires a full-fledged authoritative name server like BIND. It won't work with a caching resolver like Unbound (or even dnsmasq) – they require such a query to be answered locally/directly.

        1 Reply Last reply Reply Quote 0
        • T
          tlinder last edited by

          Hi David
          You can do is lookup the ip for forcesafesearch.google.com which is

          216.239.38.120

          and then activate the dns forwarder and create an entry

          Host: www
          Domain: google.com
          IP: 216.239.38.120

          Then you point the DNS-entry of your client machines or your dhcp server to the IP of your pfsense.

          If you also want to block all other 195 domains that google has active you can import the forwarder file I created (see below) by going to :

          Diagnostics -> Backup/restore -> Restore configuration -> Restore Area: DNS Forwarder

          Hope this helps. Keep in mind that the IP-Address can change in the future.

          [google safesearc hosts import for pfsense.txt](/public/imported_attachments/1/google safesearc hosts import for pfsense.txt)

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy