Synkrox Posted November 7, 2014 Posted November 7, 2014 Is it me or is it a massive oversight that we cannot force safety mode on through our filtering boxes? I know the standard reply is "education mode" but at secondary level its really not practical to have to whitelist all the videos anyone might ever want to watch on the site which has all the videos in the world on. I know safety mode is not infallible but surely its a great deal better than the "unfiltered" version. I have posted a question on the Youtube forum. I'm not holding my breath for a reply from anyone at google, but perhaps if you agree that this cookie setting is terribly impractical then you could look at commenting/starring my post to try and get some attention from it: https://productforums.google.com/forum/#!category-topic/youtube/BdCO_0waxgU I'm using a Fortigate box to filter internet here. If anyone has a suggestion on how I can sort this out another way I'd be pleased to hear it! Chris
Sagima Posted November 7, 2014 Posted November 7, 2014 I 'm pretty sure it's forced on through our smoothwall so I imagine fortigate will have a similar option
Synkrox Posted November 7, 2014 Author Posted November 7, 2014 (edited) Nope, safesearch for bing,yahoo,google etc but not safety mode. Have spoke to them and as its cookie based they don't have a solution. Was the issue with smoothwall no longer being able to force it resolved then? http://www.edugeek.net/forums/internet-related-filtering-firewall/50497-force-youtube-safety-mode-2.html Edited November 7, 2014 by Synkrox
Sagima Posted November 7, 2014 Posted November 7, 2014 You've made me check now! It is set as on for the students and off for staff but regardless of who is logged inthe bit at the bottom says safety mode off. Importantly the dodgy videos themselves come up with "This video is unavailable in safety mode" for the students. 1
themightymrp Posted November 7, 2014 Posted November 7, 2014 We use Bloxx and that enables us to turn the safe search on... must be possible in other appliances too??
Synkrox Posted November 7, 2014 Author Posted November 7, 2014 Interesting, I wonder what's going on behind the scenes there then and if Fortigate could replicate it in some way.
Synkrox Posted November 7, 2014 Author Posted November 7, 2014 Safesearch is fine, I am on about Youtube Safety Mode specifically.
themightymrp Posted November 7, 2014 Posted November 7, 2014 If you mean the safety mode which gives this kind of screen, then that is what I'm referring to. I had to lower the standard 'moderate' level for staff because it was blocking all sorts
Iain Posted November 7, 2014 Posted November 7, 2014 You can set it at the network level by using the same DNS hack that you can use to force SafeSearch in google search (See option 3 https://support.google.com/websearch/answer/186669?hl=en). Create a new DNS zone for www.youtube.com and then create a new CNAME within this zone, leave the alias blank and set the hostname to forcesafesearch.google.com.
hyb80 Posted November 20, 2014 Posted November 20, 2014 You can set it at the network level by using the same DNS hack that you can use to force SafeSearch in google search (See option 3 https://support.google.com/websearch/answer/186669?hl=en). Create a new DNS zone for www.youtube.com and then create a new CNAME within this zone, leave the alias blank and set the hostname to forcesafesearch.google.com. [ATTACH=CONFIG]27460[/ATTACH] Anyone tried this ? Does it work over https?
Iain Posted November 21, 2014 Posted November 21, 2014 Anyone tried this ? Does it work over https? I've got it set up this way here and it works with HTTPS, whether signed into YouTube or not. When you try and change the SafetyMode setting using the option at the bottom of the page you get the attached message: The only downside is that it is a blanket setting for the network, so you can't disable it for certain users. Iain.
hyb80 Posted November 21, 2014 Posted November 21, 2014 (edited) Mistake post Edited November 21, 2014 by hyb80
Iain Posted November 21, 2014 Posted November 21, 2014 (edited) I created a new primary zone for http://www.youtube.com (the www is important!) as the zone needs to be authoritative: Then, in your new http://www.youtube.com zone, create a new CNAME record with a blank alias and with forcesafesearch.google.com as the FQDN for the target host: Iain. Edited November 21, 2014 by Iain spelling 2
hyb80 Posted November 21, 2014 Posted November 21, 2014 Cheers for that. Need to clear this before enforcing it across the school. Will let you know how I get on.
Synkrox Posted November 21, 2014 Author Posted November 21, 2014 Thanks Iain, However you cannot create a DNS record that way (at least not in 2008R2) as it gives an incompatible format error. Similar but relevant thread here:https://social.technet.microsoft.com/Forums/windowsserver/en-US/eebd5c3f-8d96-4014-9852-f3028c71d930/implementing-cname-wwwgooglecom-pointing-to-nosslsearchgooglecom-without-making-dns-server?forum=winserverDS To get around this - If you create an A record instead and point it to the IP of forcesafesearch.google.com (216.239.38.120) then it resolves fine and you can access youtube, However safety mode is still not on, and it has no effect. Are you positive this is how you have it set up and it works? could there be something else you have done to force it on? Chris
Iain Posted November 21, 2014 Posted November 21, 2014 Hi Chris, I added these records to our DNS a while back, so it may have been on an old 2008 DNS. Having said that, I've just tested by adding a DNAME record (under Other New Records...) instead of a CNAME record on our new 2012r2 DNS and that worked fine (don't forget to clear all caches ipconfig /flushdns etc.) Iain. 3
hyb80 Posted November 24, 2014 Posted November 24, 2014 Just set this up and preliminary testing would seem that this does indeed work Server 2008 R2 creating a DNAME file. Had to flushdns on the client PC
bilbogeek Posted February 22, 2015 Posted February 22, 2015 Hi, this works great for google and youtube on desktop machines but it doesn't seem to work for the youtube app on our tablets. Any ideas.
hyb80 Posted February 23, 2015 Posted February 23, 2015 So far can't get the app to behave so pulled it and set up a redirect for both m.youtube.com and s.youtube.com to YouTube.com in lightspeed. This seems to force safe search via the browser.
Opendium_Steve Posted February 23, 2015 Posted February 23, 2015 I think the app uses googleapis.com instead of youtube.com. Unfortunately redirecting it to forcesafesearch doesn't work and I've not seen any documentation relating to doing this for the app. On the other hand, Youtube's Safety Mode seems to be extremely aggressive, blocking an awful lot of completely innocent videos, so it seems that a lot of schools simply don't use it at all...
caffrey Posted February 24, 2015 Posted February 24, 2015 If you use chrome rather than IE, you can set this via GPO via the force safesearch setting, it also enforces it in Youtube. I agree with the overblocking, I uploaded a video to our school channel and no one could view it - it was totally innocent.
irod87 Posted April 24, 2015 Posted April 24, 2015 I just got this to work using LAIN DNAME instructions. Thanks! This will be better than straight unfiltered results.
OB1 Posted April 27, 2015 Posted April 27, 2015 Nope, safesearch for bing,yahoo,google etc but not safety mode. Have spoke to them and as its cookie based they don't have a solution. Was the issue with smoothwall no longer being able to force it resolved then? http://www.edugeek.net/forums/internet-related-filtering-firewall/50497-force-youtube-safety-mode-2.html This issue was definitely resolved. Just to clarify, are you using smoothwall? If so drop me a PM, I'll see what I can do.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now