linkazoid Posted January 4, 2016 Posted January 4, 2016 Hi, It seems Youtube are now enforcing HTTPS on the whole site and LGfL are now enforcing Restricted Mode by Default. They've issued the following statement. Google have recently made a change forcing all YouTube traffic to be encrypted (HTTPs) thereby limiting the effectiveness of Safe Search and keyword blocking through the WebScreen 2.0 filtering service. As a result of these changes and to protect schools from inappropriate content, the LGfL DNS servers have been set to enforce YouTube’s new Restricted Mode. Schools that would like to turn off the Restricted Mode should configure a DNS forwarding rule on their own DNS servers pointing youtube.com, googleapis.com and youtube-nocookie.com domains to the Google Public DNS IP addresses (8.8.8.8 and/or 8.8.4.4). Has anyone done this and could send me a screenshot of DNS, no matter what configuration we try it does not seem to work We do not use GAPS.. Thanks, Michael
Davit2005 Posted January 4, 2016 Posted January 4, 2016 Hi, It seems Youtube are now enforcing HTTPS on the whole site and LGfL are now enforcing Restricted Mode by Default. They've issued the following statement. Has anyone done this and could send me a screenshot of DNS, no matter what configuration we try it does not seem to work We do not use GAPS.. Thanks, Michael Would also be interested in this.
localzuk Posted January 4, 2016 Posted January 4, 2016 I haven't done this, but have you tried using the "Conditional Forwarders" part of Windows DNS? 3
linkazoid Posted January 4, 2016 Author Posted January 4, 2016 (edited) I haven't done this, but have you tried using the "Conditional Forwarders" part of Windows DNS? Great, This seems to be the correct place to put it! Edited January 4, 2016 by linkazoid 3
fiza Posted January 4, 2016 Posted January 4, 2016 Excuse my naivety but isnt restricted mode a good thing?
linkazoid Posted January 4, 2016 Author Posted January 4, 2016 It should be, but when you have teachers moaning that they can't show videos on WW2 or anything other than cat videos it's a bit too restrictive.
Davit2005 Posted January 4, 2016 Posted January 4, 2016 Excuse my naivety but isnt restricted mode a good thing? We just seemed to have so many intermittent issues when we enforced safe search on the firewall with, one minute OK and then all of a sudden start getting reports about YouTube not working. Once we totally remove the old proxy servers we will be trying again with the DNS method.
jonspurs Posted January 4, 2016 Posted January 4, 2016 And also, by adding a DNS condition in WIndows Server, doesn't that man that all users will be able access Youtube?
linkazoid Posted January 4, 2016 Author Posted January 4, 2016 We still get the LGfL block page and then after authenticating Youtube is available.
localzuk Posted January 4, 2016 Posted January 4, 2016 And also, by adding a DNS condition in WIndows Server, doesn't that man that all users will be able access Youtube? Yes, unless you are using some form of proxy upstream, which is itself handling the DNS resolution, in which case the conditional forwarder won't be much use. We still get the LGfL block page and then after authenticating Youtube is available. If you're getting some form of page from LGfL, then you are not using an external DNS server to resolve the site I don't think! How exactly is your web traffic handled. In SWGfL, it all goes via a proxy farm they run, with our own onsite proxy which uses the SWGfL farm as its upstream.
jonspurs Posted January 4, 2016 Posted January 4, 2016 Yes, unless you are using some form of proxy upstream, which is itself handling the DNS resolution, in which case the conditional forwarder won't be much use. If you're getting some form of page from LGfL, then you are not using an external DNS server to resolve the site I don't think! How exactly is your web traffic handled. In SWGfL, it all goes via a proxy farm they run, with our own onsite proxy which uses the SWGfL farm as its upstream. Cheers for your reply. Thought I'd add 8.8.8.8 to my local hosts file to test if it'd work (we're on LGFL and have a Smoothwall onsite) and still Youtube Protected Mode is enforced. Though we're on Google Apps, so have made changes to the Apps dashboard and users can 'Sign in' to watch restricted content.
DavR Posted January 5, 2016 Posted January 5, 2016 I had my first complaint about this yesterday at 4.30, now I understand why... In that instance I just bypassed the filtering and downloaded the required content, thinking it was a one-off. It will be interesting to see how many reports of blocked videos I get this week then, as I can't do that each time. Like a lot of people, I have YouTube allowed for staff only, so this is going to leave me with a choice of too much filtering on YouTube, or none at all, great! I often wonder if Atomwide are way too zealous with this vendetta they have against https (really guys? Increasing security.... by blocking https. Amazing!), but on the flipside teachers would be up in arms if keyword filtering / Safe Search didn't work and you could potentially Google search one bikini picture...
Network_Boy Posted January 5, 2016 Posted January 5, 2016 Great, This seems to be the correct place to put it! [ATTACH=CONFIG]34052[/ATTACH] Hi Linkazoid, Have you managed to get Youtube working without restricted mode at your site? I've added the conditional forwarders as per your screenshot, but I still get restricted mode. Is there anything I need to do after adding the forwarders? Do you need to apply them or anything? (Please excuse my ignorance, I've not done any of this before!). Thanks!
linkazoid Posted January 5, 2016 Author Posted January 5, 2016 @Network_Boy I am able to turn restricted Mode on or Off. I set all of the conditional forwarding to 8.8.8.8 and it worked. Send me a PM with your email address and I'll see if I can help any further.
Network_Boy Posted January 5, 2016 Posted January 5, 2016 @Network_Boy I am able to turn restricted Mode on or Off. I set all of the conditional forwarding to 8.8.8.8 and it worked. Send me a PM with your email address and I'll see if I can help any further. Thank you! PM sent.
localzuk Posted January 5, 2016 Posted January 5, 2016 Remember to clear dns caches on any machines after making such a change, as the clients will cache the old details. 1
Wizborg Posted January 6, 2016 Posted January 6, 2016 You'll never guess what.. After putting these into effect on our domain, which was working yesterday, Youtube restricted mode has come back on. Is anyone else suffering with this? Thanks
vedder Posted January 6, 2016 Posted January 6, 2016 Does anyone done this on Win 2003? im having issues applying the LGFL fowarders. Unfortunately im still running CC4 4.2 . Cheers
maestromasada Posted January 6, 2016 Posted January 6, 2016 Great, This seems to be the correct place to put it! [ATTACH=CONFIG]34052[/ATTACH] One of your entries is wrong, shouldn't it be "googleapis.com" instead of "googleapi.com"? I've added them all, but still got Restricted Mode enable...
linkazoid Posted January 6, 2016 Author Posted January 6, 2016 List of URLs from Google - https://support.google.com/youtube/answer/6214622
maestromasada Posted January 6, 2016 Posted January 6, 2016 Cheers for your reply. Thought I'd add 8.8.8.8 to my local hosts file to test if it'd work (we're on LGFL and have a Smoothwall onsite) and still Youtube Protected Mode is enforced. Though we're on Google Apps, so have made changes to the Apps dashboard and users can 'Sign in' to watch restricted content. Hi Jonspurs, this is a good idea. Is the Restricted Mode lifted once they logon with a Google Apps account? I'm trying to enable Google Apps for us at the minute Thanks
localzuk Posted January 6, 2016 Posted January 6, 2016 Hi Jonspurs, this is a good idea. Is the Restricted Mode lifted once they logon with a Google Apps account? I'm trying to enable Google Apps for us at the minute Thanks You can control what access users get via the Google Admin site. For example, you could have completely unrestricted for staff, but restricted for students. You can also set up a group that is allowed to approve videos. 1
Wizborg Posted January 6, 2016 Posted January 6, 2016 Figured out my problem, conditional forwarders were being ignored, I had to run "dnscmd /config /enableednsprobes 0" and then restart the DNS and Netlogon services. Hope this helps someone.
Wizborg Posted January 6, 2016 Posted January 6, 2016 You can control what access users get via the Google Admin site. For example, you could have completely unrestricted for staff, but restricted for students. You can also set up a group that is allowed to approve videos. That costs though for more than 10 users.. Unless you've already got an account with them, would it really be worth it?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now