Skip site navigation (1)Skip section navigation (2)
Date:      20 Aug 2017 18:47:58 -0000
From:      "John Levine" <johnl@iecc.com>
To:        freebsd-questions@freebsd.org
Cc:        luzar722@gmail.com
Subject:   Re: How to block facebook access
Message-ID:  <20170820184758.4848.qmail@ary.lan>
In-Reply-To: <5999955C.9030601@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
In article <5999955C.9030601@gmail.com> you write:
>What do you think about this method?
>
>Add entries into /etc/hosts file.
>
>127.0.0.1    blacked www.facebook.com
>127.0.0.1    blacked n.facebook.com
>127.0.0.1    blacked facebook.com
>127.0.0.1    blacked login.facebook.com

Seemn like a fairly ineffective way to block users across a LAN most
of whom are likely running Windows.  You need to block the names they
look up, not local lookups on the gateway.

I do agree that the best way to block Facebook is via the DNS cache on
your gateway, assuming that's how your LAN is set up.  Bind and
Unbound both have ways to add local overrides.  RPZ is one possibility
but for a short static list of names, there are easier ways.

R's,
John



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20170820184758.4848.qmail>