Support

K-12 Forums

Talk with other K-12 network administrators in your state.

Or see all states.

Categories

Vanilla 1.1.4 is a product of Lussumo. More Information: Documentation, Community Support.

This discussion has been inactive for longer than 30 days, and is thus closed.

Administrative: Multiple Filter Group in one Network

Bottom of Page

1 to 15 of 15

  1.  
  1.  permalink
    Just want to know if is it possible to have different groups in your network where different filter applies. Like for example group A wont be allowed to go to GMail.com but Group B is allowed.

    Please enlighten me.. :confused:
    • CommentAuthormurpheous
    • CommentTimeApr 9th 2009
     permalink
    As long as the different groups use different external ip adresses to access the internet, then yes. Otherwise, no.
  3.  permalink
    unfortunately they are using same external IP. :(
    • CommentAuthorrotblitz
    • CommentTimeApr 9th 2009
     permalink
    "unfortunately they are using same external IP. :("
    So, how did you imagine that OpenDNS could differentiate the groups???
  5.  permalink
    Hmm maybe there is a program that can tell the DNS server which group a computer belongs to. i dunno, just my wild idea.
    • CommentAuthorrotblitz
    • CommentTimeApr 9th 2009
     permalink
    Be ensured, there isn't. Else someone would have already used it, right?
    DNS is strictly standardized with not much opportunities.
    http://en.wikipedia.org/wiki/Domain_Name_System
  7.  permalink
    yeah i know how a DNS works.
    Well i guess i just have to get another DNS service for the other PC who need a different filtering aside from OpenDns.

    Any suggestions?
    • CommentAuthorrotblitz
    • CommentTimeApr 9th 2009 edited
     permalink
    Ask your ISP if you can get static IP addresses and get two (or more).
    If this is all too expensive, there are cheaper methods to achieve what you want, and probably more effective and sophisticated in bigger networks, like an own proxy or DNS server with related (free) software, see e.g. http://www.untangle.com/ or http://www.privoxy.org/ .
    Thankful People: hackersbox
    • CommentAuthorPaul
    • CommentTimeApr 9th 2009
     permalink
    Can you NAT your DNS to your different groups?

    You only need to setup your DNS IPs, not your traffic IP.

    Example:
    .1 is your internet traffic for everyone (not setup on OpenDNS)
    .2 is DNS for Group A (setup on OpenDNS)
    .3 is DNS for Group B (setup on OpenDNS)
    • CommentAuthorrotblitz
    • CommentTimeApr 9th 2009 edited
     permalink
    NAT would not help, as this doesn't add external IP addresses.

    Also, "internet traffic for everyone (not setup on OpenDNS)"
    Oh, you must cover this as well in an OpenDNS network, else some features wont function at all.
    Also, if you have more than one static IP address, you would configure a CIDR /31 or /30 OpenDNS network, where all IP addresses are covered anyway.
    • CommentAuthorhackersbox
    • CommentTimeApr 12th 2009
     permalink
    I agree with rotblitz.
    I guess I will setup a spare computer and turn it into a private proxy server and point all traffic coming from Group B to it.
    • CommentAuthorklehr
    • CommentTimeApr 13th 2009 edited
     permalink
    Open DNS could make money off this, I would bay for the feature of addtional DNS sets.

    Group_A uses servers X.X.X.1 & X.X.X.2
    Group_B uses servers X.X.X.3 & X.X.X.4

    Seems like a simple feature to implement.
  13.  permalink
    Make money off the impossible? Excellent.

    How does anything in the internets know where the request came from, aside from your single internet-facing IP address?

    Your ISP would most likely be happy to make money from selling you more than one IP address, however.
    • CommentAuthorhackersbox
    • CommentTimeApr 22nd 2009
     permalink
    Hmm another idea is to put a portal-like site where they can enter unique username and password when ever they try to visit a page that is prohibited then save the session thru a cookie. If authentication is successful, opendns can redirect the user to the website he wanted, if not, it will be blocked.
    • CommentAuthorrotblitz
    • CommentTimeApr 22nd 2009
     permalink
    There is already at least one idea about this in the idea bank. You can vote for it.

1 to 15 of 15

  1.  

This discussion has been inactive for longer than 30 days, and is thus closed.