Force local DNS resolution in Squid when using upstream proxy?

[localzuk]

I'm attempting to put in place the restrict.youtube.com stuff to limit youtube access now that Youtube for Schools is dying off, but I've come across an annoying issue.

 

Our site uses Squid as its proxy server, and it relays all requests upstream to SWGFL's proxy servers. This means that DNS resolution appears to be done upstream, which skips our onsite DNS records for the restrict stuff.

 

Is there a way I can get Squid to handle the DNS resolution locally, then go out to the upstream server?

[ReBoot]

I have the restricted mode locked across my network and use Google Apps to provide a teacher account which can be used to show unrestricted content.

 

I have a local proxy server/filter using Dansguardian and Squid.

 

My gut feeling is that you can't force local DNS resolution when using an upstream cache.

 

What is SWGFL's approach to YouTube filtering ? I think our LEA uses SSL intercept on the search terms and page content rather than relying on YouTube's restricted mode (same applies to Google searches). This is a fundamentally different approach to using restricted mode.

 

I think you need to talk to SWGFL to find out how they handle YouTube and if and how it integrates with restricted mode.

[localzuk]

Their latest view appeared to be "you're on your own"... As youtube for schools is dead (RIP), they've said the options are: unfiltered or blocked...

[localzuk]

Ah, I have now been told that I should simply exclude all the youtube domains from using the proxy. So, users are going direct instead! Seems to work.

[ReBoot]

Once you have restricted mode on using DNS you will need a Google Apps account to override it. YouTube's classification of videos will block lots of innocent content that your teachers will want to access. Luckily its not too time consuming to sign up for Google Apps.