How to block websites with your internal dns server

Just create a new Master Zone with the domain you want to block.

If you are running BIND9 and Webmin as I do, that’s even easier: click on “create master zone”, in the “domain name / network” field write the domain, e.g. “facebook.com”, don’t forget to specify an email, then click “create” and “apply changes”

One Response to “How to block websites with your internal dns server”

  1. Willy Says:

    A better way is to use an iptables rule like
    iptables -A OUTPUT -d 69.63.178.11 -j DROP
    (but you need to know every alias for facebook).

    This is better because if you know IP address of a site you can bypass DNS.

    Best regards friends

Leave a Reply