Apache on Mac os X server Blocked Domains problem

[bigdirk]

Hello,
I have setup apache on Mac os X server. I need to block access to a list of 50000 domains mainly porn sites. How do I go about doing this without entering them one by one. Is there a file I can paste the list into? I have looked at the .conf files but no luck so far. Any help would be greatly appreciated.

Thanks,
Dirk.

 

[sleipnir214]

For what purpose are you blocking these domains from your server?


Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[bigdirk]

My aim is to stop users from accessing these sites due to the nature of the content. I need to know how to do it on mass and not one by one. The list will obviously grow as time goes by.

Thanks,
Dirk

 

[sleipnir214]

Okay, I guess you have content which will offend pornographers.

It's difficult to block a domain. Your web server will only know a user's IP address, and there is no deterministic way to match a domain to an IP address or set of IP addresses. Unless they have set up reverse DNS, which must be done separately from forward DNS, you won't be able to tell from what domain a user is coming. Even if reverse DNS is set up, it's a slow operation which will hurt the performance of your site.


Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[bigdirk]

I apologise for the misunderstanding. Let me explain,
I run a business, I recently aquired a Mac server running Apache. I need to stop my employees from accessing porn. On my windows 2003 servers I run Surfcontrol which does this for me. The reason I am also using a Mac is for it's security features.

In other words, I need my employees to work more and surf porn less. How do I do that using apache? I can do it using the Mac Server admin interface which allows me to block one site at a time. I have a list of over 50000 many of which my employees will be sad to see blocked.

Thanks,
Dirk

 

[sleipnir214]

It is possible, I think, to do that using Apache, but it's not the best tool for the job.

I recommend instead that you look at the Squid proxy server. It has the kind of functionality you're looking for.


Want the best answers? Ask the best questions!

TANSTAAFL!!