- Home »
- FAQ »
- Security »
- Content Security Management (CSM) »
- [Vigor3900] How to block YouTube (with LAN DNS)?
[Vigor3900] How to block YouTube (with LAN DNS)?
Support Model : Vigor3900Vigor2960Vigor300B
From Dig command (or nslookup), we can see that some of the Google service (e.g. gstatics.com) shares the same IP groups with YouTube websites(as the following images show). Since the both websites are using the same IP group, using Keyword Block and Web Content Filter to block YouTube may also block some of the Google services at the same time. Therefore, it is suggested to use the LAN DNS to block YouTube.
(This note demonstrates how to use the LAN DNS feature to block YouTube on Vigor3900, Vigor2960, and Vigor300B. For other models, please refer to the article here.)
1. Create a LAN DNS profile: Go to LAN >> LAN DNS, click Add and configure profile details.
- Input profile name.
- Check Status to enable the LAN DNS profile.
- Input "youtube.com" for Domain Name.
- Click Add then input "www.youtube.com" for CNAME. Click Save to save the CNAME setting.
- Input an invalid IP address, such as 184.108.40.206.
- Apply the settings.
2. Enable DNS Redirection: Go to LAN >> General Setup, in a LAN profile in use, enable DNS Redirection.
3. After completing the configurations above, please run "ipconfig/flushdns" on the Windows Command Prompt to ensure local computer will send a new DNS query for www.youtube.com
4. In this example, when PC is sending DNS query to ask who is www.youtube.com, Vigor3900 will respond the IP of www.youtube.com is 220.127.116.11. Since 18.104.22.168 is not the real IP of www.youtube.com,the PC cannot access it now. And please note that LAN DNS settings will apply to all the LAN client, if you'd like to block YouTube from some IP only, please refer to the article here.