I have about 22 years of networking experience, and honestly, the reasons given are complete nonsense given that anything that applies to the manual scheduling also applies to automated scheduling. We've seen a number of technical arguments trying to explain why this cannot be done on a schedule. Right now CISCO sells a service that allows customers to manually block or allow certain sites or categories of sites. Ohpendeeeness, agreed, and honestly the arguments against offering this seem to confuse CISCO's definition of the problem with the actual functionality that people are asking for. Here's another article which may help you. ![]() I don't expect to just plug it in and go. I'm not sure if these options will be good for you, I guess you will have to decide. You can also run reports on usage which most routers don't do very well.Īnother option is NxFilter which also runs on the Pi. It's not going to be 100% foolproof, but it does work. With Pihole you can create your own block lists or download one that somebody else has created. Routers are not going to block youtube effectively in my opinion. You will have to download Pihole and install it on the Pi yourself using a USB stick. I spent $100 on Amazon for a kit which includes a case with fan, cables, power supply, and sim card with OS pre-installed. You may be able to buy one with wifi capabilities to replace your router, but I'm not going that route (no pun intended). The Raspberry Pi will work in conjunction with your router to filter and report on traffic. ![]() Yes, Pihole is free software written for the Raspberry Pi but I understand you can also run it on a Linux server as it's Linux based. But this software again counts as local equipment.) If you install the client agent for Windows or Mac in conjunction with certain Umbrella services, then there may be also a VPN tunnel involved also controlling the actual traffic. OpenDNS/Umbrella have no influence on the actual traffic. DNS is the phone book of the internet, not the phone lines. " the machines on my network are just doing a DNS lookup, the traffic's not actually passing through OpenDNS."Ībsolutely correct. That means, as long as your browser or OS or OpenDNS/Umbrella "thinks" that the previous DNS query result is still fine, so a new DNS query is not needed, and the result is taken from a previous query, then the settings change appears as not taking effect, although the category (of domains) is enabled/disabled for blocking at your dashboard. So in fact, it is something like "changing the DNS record", at least from your individual view, not from the general view. You reconfigure your dashboard settings for all domains belonging to this category to no longer provide their real IP addresses when your network queries them, but an OpenDNS/Umbrella address () is returned instead. " I guess what I don't get is what happens in the background when I enable/disable a category." Perhaps there is? I was toying with the idea of installing a Raspberry Pi to accomplish this task, but that would cost me money and I'm not sure it's possible with the software available anyway, couldn't find anything in the documentation. Right now there is no software out there that takes care of this as far as I know. This process takes up to 3 minutes right now. At 8:30 pm, it would automatically disable, etc. At 3:00 pm, for my account, the system automatically enables this category for me. All that would be needed would be the ability to turn this on and off on a schedule. It only enables and disables this category for me. This does not involve any DNS record changes as far as I know. I wouldn't expect the DNS records to change, that's not what we're asking for.Ĭurrently, we can enable and disable categories on our accounts through Cisco Umbrella category blocking, correct? I can turn video sharing sites on and off for example. ![]() I'm pretty familiar with the ins and outs of DNS records, being a network admin myself. The point I was trying to make without getting into it too much was that if Sony and Nintendo can do this, then Cisco can certainly do it. I realize that the processes are not the same.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |