HOSTS File Question

[smarksfrcb]

I have a question that I don't even know if it can be done. I have 20+ users who have the internet locked down to what is in the HOSTS file local to the machine. One of our client sites uses a map object at maps.live.com. However, maps.live.com resolves to multiple ip address in nslookup...see results:

C:\Users\fname.lname>nslookup
Default Server: dns1.ns.sympatico.ca
Address: 142.177.1.2:53

> maps.live.com
Server: dns1.ns.sympatico.ca
Address: 142.177.1.2:53

Non-authoritative answer:
Name: maps.live.com
Addresses: 65.55.241.11, 65.55.241.12, 65.55.241.13, 65.55.241.14


How can I add this to my HOSTS file to resolve the proper ip address when it could resolve to any one of the four above.

Thank You
Shane

 

[tfg13]

Are you able to get to the "maps.live.com" address, if you type in the IP (choose any one)? The only issue with going this route is if one of those IP's goes down, so putting a "static" IP for maps.live.com is kind of dangerous.

Are we talking windows clients? If so, why not start utilizing the capabilities of group policy, and only allow a white list connection? With 20 users, you can even start to look at having a proxy server with a white list. Something cheap you can look at would be using Linux's squid. Just cost a machine.

Do you have a firewall/control of the firewall? If so, you can look at creating ACL's on the firewall.

Multiple routes you can go, just need to expand the thinking past the host file.