3 ms·
Basic question: why are all these blocks at the DNS level? If I want to block users of my network from accessing website X, why would I not block it at the IP
by omegalulw 5y ago
Basic question: why are all these blocks at the DNS level?
If I want to block users of my network from accessing website X, why would I not block it at the IP level (level 3) by blocking all packets to all IP address that other DNS providers associate with website X?
- josephcsible 5y agoBecause of CDNs like Cloudflare, that are basically name-based virtual hosting.
- netheril96 5y agoIf you want blocking to be effective you will need China style GFW. DNS block + IP blacklist + deep packet inspection.