Great Circle Associates Firewalls
(November 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Restricting URL's
From: ralph @ omni . mpsisys . com (Ralph Mitchell)
Date: Thu, 9 Nov 1995 09:20:00 -0600
To: firewalls @ GreatCircle . COM

> Mike Culver wrote:
> > 
> > To deny resolution to sex.com, simply add an entry to named.boot for
> > bogusns. This directive will tell your DNS that the name server for sex.com
> > is bogus, and your DNS will never ask sex.com's DNS anything.
> 
> Nice idea, but...  Most of these one-host-wonder sites actually
> use their ISP as a name server.  Disallowing the ISPs name server
> is a bit drastic.  Look at playboy.com for example...

Then how about putting an entry in my internal DNS that points sex.com to
either a non-existent internal address or to something like a PC running
Linux+httpd with a single web page that says "Gotcha !" ??  The outside
world can't see my internal DNS so I won't be polluting anyone elses DNS...

Of course the user could telnet to rs.internic.net and use whois to establish
the actual IP address...

Ralph Mitchell


Follow-Ups:
Indexed By Date Previous: clarification on rfc-1597 addresses and transparent proxies
From: Dieter Dworkin Muller <dworkin @ village . org>
Next: Re: Restricting URL's
From: "Bryan D. Boyle" <bdboyle @ maverick . erenj . com>
Indexed By Thread Previous: Re: Restricting URL's
From: Carl Jolley <cjolley @ iac . net>
Next: Re: Restricting URL's
From: "Bryan D. Boyle" <bdboyle @ maverick . erenj . com>

Google
 
Search Internet Search www.greatcircle.com