Google SSL CNAME record for schools - different angle

Comments

4 comments

  • Avatar
    rotblitz

    Why would you block Google's SSL site if not blocking Google as a whole?  I don't see any sense with this.  But I'm sure you will enlighten me.

    "can OpenDNS have an option where if we select it, they'll have the CNAME www.google.com point to nosslsearch.google.com for us?"

    This can be answered only by OpenDNS.

    "It'd also be something that would work for the home users, too."

    Most easy.  Add the following entry into your hosts files:
    216.239.32.20   www.google.com
    (The IP address may be different, but should be the one for nosslsearch.google.com.)

    Other options include an own DNS server or proxy server.

  • Avatar
    net-guru

    I added the nosslsearch.google.com CNAME in my DNS serves and my firewall is enforcing safesearch on OK but unfortunately if I point my users to the virtual dns for opendns, that cname doesn't work. If I point to my dns, safesearch setting in the browser is enforced on. Has any body ever got it to work through the openDNS virtual machines ?

     

    Samuel

  • Avatar
    rotblitz

    "openDNS virtual machines"

    I'm afraid this does not exist.

    Well, you need to make your DNS server authoritative (only) for the "zone" www.google.de, i.e. you must not forward queries for this to your external service, e.g. OpenDNS (or any other).  All the rest you can forward to the external DNS service.

  • Avatar
    rotblitz

    Not sure why it changed to www.google.de, but I meant www.google.com, of course...

Please sign in to leave a comment.