Here is what I need to accomplish:
We have a smallish Active Directory network, with a single DNS server
internal. All DNS queries for internet addresses currently go through the
root hints. My supervisor wants to somehow block, without adding entries to
our firewall, various website (myspace.com was mentioned) I would like to
know if there is some way, within Windows 2003 DNS, for me to create a
pointer so that when someone tries to access myspace.com, it points to
127.0.0.1. I have been trying some on my home DNS server, and haven't found
a way, yet. Having some way to madify the cached lookups would be ideal,
however, having seen that the cahced lookups aren't saved through a reboot
(such as from Windows updates), I guess that won't be a solution. Am I going
to have to somehow configure the DNS server to believe it is also a root
server? If so, how would I go about this, preferably without blocking access
to all internet sites?

Any is appreciated,
Jason A.

Jason A Ash wrote:
> Here is what I need to accomplish:
> We have a smallish Active Directory network, with a single DNS server
> internal. All DNS queries for internet addresses currently go
> through the root hints. My supervisor wants to somehow block,
> without adding entries to our firewall, various website (myspace.com
> was mentioned) I would like to know if there is some way, within
> Windows 2003 DNS, for me to create a pointer so that when someone
> tries to access myspace.com, it points to 127.0.0.1. I have been
> trying some on my home DNS server, and haven't found a way, yet.
> Having some way to madify the cached lookups would be ideal, however,
> having seen that the cahced lookups aren't saved through a reboot
> (such as from Windows updates), I guess that won't be a solution. Am
> I going to have to somehow configure the DNS server to believe it is
> also a root server? If so, how would I go about this, preferably
> without blocking access to all internet sites?

Create a new zone named myspace.com. you don't have to create any record
because this will block DNS from resolving that domain.
If you want, you can create a new domain in that zone named with an asterisk
*, then in that new sub domain create a new host leave the name field blank
and give it any IP address you want.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Wonderful!!

Just tested locally, worked perfect!
Thank you!

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Jason A Ash wrote:
> > Here is what I need to accomplish:
> > We have a smallish Active Directory network, with a single DNS server
> > internal. All DNS queries for internet addresses currently go
> > through the root hints. My supervisor wants to somehow block,
> > without adding entries to our firewall, various website (myspace.com
> > was mentioned) I would like to know if there is some way, within
> > Windows 2003 DNS, for me to create a pointer so that when someone
> > tries to access myspace.com, it points to 127.0.0.1. I have been
> > trying some on my home DNS server, and haven't found a way, yet.
> > Having some way to madify the cached lookups would be ideal, however,
> > having seen that the cahced lookups aren't saved through a reboot
> > (such as from Windows updates), I guess that won't be a solution. Am
> > I going to have to somehow configure the DNS server to believe it is
> > also a root server? If so, how would I go about this, preferably
> > without blocking access to all internet sites?
>
> Create a new zone named myspace.com. you don't have to create any record
> because this will block DNS from resolving that domain.
> If you want, you can create a new domain in that zone named with an asterisk
> *, then in that new sub domain create a new host leave the name field blank
> and give it any IP address you want.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>