Force Safe Search Google Search with DNS


have quite interesting issue dns randomly occurred 1 weekend seemingly without change in variables. i work technology of school in north texas. we have been using domain alias (dname) record on our dns servers force traffic use google safe search time now. of sudden, stopped working, refusing resolve google search requests our users network wide. dns record such:

have forward lookup zone directory for www.google.com

in directory, have the soa record of parent directory particular dns server, 2 ns records our primary , secondary dns servers. record have added dname record directory takes fqdn of www.google.com and target host fqdn of forcesafesearch.google.com.

has been working months, forcing google search traffic onto safe search. once stopped working, fixed problem deleting dname record , replacing record for www.google.com and ip address of forcesafesearch.google.com, 216.239.38.120. setup works now, want know why broke in first place.

had issue dns resolution secure https due to beta firmware on our security appliance months ago, seems problem our dns server using google's public dns on host on network resolved google search requests and www.google.com perfectly fine (which beta firmware issue still did not work). once changed record, works fine.

per google support, cname record made in exact same way had done, used domain alias instead of alias record. other educational organizations in our area use dname entry without qualms (yet). any thoughts on why won't work on our network anymore?

https://support.google.com/websearch/answer/186669?hl=en

hi jbparrish,

when issue happen, have checked dname record in zone? run debug mode of nslookup on client analyze.

here reference command:

https://technet.microsoft.com/en-us/library/cc940085.aspx

>>we have forward lookup zone directory for www.google.com

if have zone of google.com, i suppose dname record not needed. creating record pointing ip address of forcesafesearch achieve your goal. (just did replcae dname record)

or create record forcesafesearch.google.com, add cname record named www pointing forcesafesearch.google.com.

best regards,

leo 


please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com.



Windows Server  >  IPAM, DHCP, DNS



Comments

Popular posts from this blog

Group Policy Event ID 1058 Error Code 1326 (The user name or password is incorrect)

Suspicious event log Event ID: 4905

DCOM received error "2147746132" from...