localzuk Posted January 6, 2016 Posted January 6, 2016 That costs though for more than 10 users.. Unless you've already got an account with them, would it really be worth it? Not for education it doesn't.
Wizborg Posted January 6, 2016 Posted January 6, 2016 Not for education it doesn't. Oh, ok, I might have to look into that, not sure which I'd prefer.. lol Thanks
lewisburgess Posted January 7, 2016 Posted January 7, 2016 (edited) We're using Smoothwall on an LGfL connection. I've already set up the conditional DNS forwarders and lifted restricted mode in Smoothwall for the staff groups which is working, so they're happy again. However, for students I tried to remove the Restricted Mode and leave the SafetyMode Cookie content modification applied. This resulted in completely unfiltered YouTube access (despite also having safe search for general web searching on). I know Google have pushed people to the restricted mode (regardless of the LGfL settings and us over-riding it) but I'd have thought content management should still pick up on dodgy word searches with HTTPS decrypt and inspect. Am I doing something dopey? Or is it basically Google forcing schools down the GAFE route for controlling access to unrated (thus restricted) videos? That or literally unrestricted? Teachers won't like that much. Edited January 7, 2016 by lewisburgess
ASGeek Posted January 7, 2016 Posted January 7, 2016 Once I added the details in DNS, I then > CMD > ipconfig / flushdns if that helps anyone? your welcome
jonspurs Posted January 7, 2016 Posted January 7, 2016 We're using Smoothwall on an LGfL connection. I've already set up the conditional DNS forwarders and lifted restricted mode in Smoothwall for the staff groups which is working, so they're happy again. However, for students I tried to remove the Restricted Mode and leave the SafetyMode Cookie content modification applied. This resulted in completely unfiltered YouTube access (despite also having safe search for general web searching on). I know Google have pushed people to the restricted mode (regardless of the LGfL settings and us over-riding it) but I'd have thought content management should still pick up on dodgy word searches with HTTPS decrypt and inspect. Am I doing something dopey? Or is it basically Google forcing schools down the GAFE route for controlling access to unrated (thus restricted) videos? That or literally unrestricted? Teachers won't like that much. Hi, How did you apply conditional forwarders in Smoothwall? We also have Media/Film students who are given access to Youtube. There are so many clips that they access and it'd be a nightmare to approve clips. If I allow unrestricted access, what exactly does that include? 18+ material? Violence? Or is there still a 'Safety Mode' filter present?
DavR Posted January 7, 2016 Posted January 7, 2016 Do we have a definitive answer on whether making the conditional DNS forwarders change bypasses the Webscreen filtering for the site? I have YouTube allowed for my teachers group in Webscreen, but not allowed for students, I'm just a little concerned that if I de-restrict YouTube in this way it might bypass my filtering and allow YouTube for all users.
localzuk Posted January 7, 2016 Posted January 7, 2016 Doing this would turn of "restricted mode" for everyone using the conditional forwarder. So, yes, it would allow Youtube for all users. However, if you have filtering in place too, the HTTP/HTTPS traffic will still be traversing whatever setup you have (assuming it is proxy based, and not DNS based). That said, it brings in the issue of HTTPS interception still, so you would have to put something in place to do that as youtube is all https now.
DavR Posted January 7, 2016 Posted January 7, 2016 The filtering we're using is the Webscreen filtering service provided by Atomwide. I don't know how it works behind the scenes, but we don't use a proxy to access it. Any other Webscreen users put in this fix, and know whether it bypasses Webscreen?
RichS Posted January 7, 2016 Posted January 7, 2016 The filtering we're using is the Webscreen filtering service provided by Atomwide. I don't know how it works behind the scenes, but we don't use a proxy to access it. Any other Webscreen users put in this fix, and know whether it bypasses Webscreen? It does not, all that happens is the lookup ignores the lgfl DNS and then looks at Google to resolve, it still goes through the filtering. source: we enabled it, staff are able to log in and students are still blocked 1
DavR Posted January 7, 2016 Posted January 7, 2016 It does not, all that happens is the lookup ignores the lgfl DNS and then looks at Google to resolve, it still goes through the filtering. source: we enabled it, staff are able to log in and students are still blocked Brill, thanks very much RichS. Looks like I'll be implementing this tomorrow then!
JHLEHS Posted January 7, 2016 Posted January 7, 2016 here's the command if this is easier for you: dnscmd %computername% /zoneadd youtube.com /dsforwarder 8.8.8.8 dnscmd %computername% /zoneadd googleapis.com /dsforwarder 8.8.8.8 dnscmd %computername% /zoneadd youtube-nocookie.com /dsforwarder 8.8.8.8 1
NickAblitt Posted January 11, 2016 Posted January 11, 2016 I have the same issue as Network_Boy, any ideas ?
RichS Posted January 11, 2016 Posted January 11, 2016 I have the same issue as Network_Boy, any ideas ? I assume you've cleared all cached lookups and your DNS server cache. Do you have 2 servers at all?
mowgli82 Posted January 13, 2016 Posted January 13, 2016 @Wizborg how did you find out your dns forwarders were being ignored??
RichS Posted January 13, 2016 Posted January 13, 2016 @Wizborg how did you find out your dns forwarders were being ignored?? Simply making sure they are added correctly and then browsing to YouTube would confirm if its being ignored or not. It took a few attempts but it works fine for us. 1
rad Posted January 13, 2016 Posted January 13, 2016 We are having issues with this, one moment it works then another day it doesnt. We have all our servers set up as per LGFLs info. We have two DNS servers and they both have the forwarders set up on them.
RichS Posted January 13, 2016 Posted January 13, 2016 I hate to say it but if it's on and off but relying on your server to conditionally forward, then your server isn't conditionally forwarding?
jonspurs Posted January 14, 2016 Posted January 14, 2016 Does anyone know if there's a middle ground filtering between Unrestricted mode and Restricted mode ? Has 'Safety mode' gone completely? Staff now have unrestricted access, but media students saying their restricted access is too restricted... Thanks
RichS Posted January 14, 2016 Posted January 14, 2016 (edited) There is. I called earlier this week and was told that there are differences between the dns restriction and the self enforced one you can do on home machines but no way to implement those, it's a cookie that Google place when you change it locally but doesn't do the same with DNS. Safety mode has gone in favour of their restricted mode you can use Google Apps so perhaps a little nudge to get people on there within establishments. Google does bug me sometimes... perfectly good service that they change when they feel leaving us fighting for a solution! Edited January 14, 2016 by RichS
fiza Posted January 15, 2016 Posted January 15, 2016 Cheers for your reply. Thought I'd add 8.8.8.8 to my local hosts file to test if it'd work (we're on LGFL and have a Smoothwall onsite) and still Youtube Protected Mode is enforced. Though we're on Google Apps, so have made changes to the Apps dashboard and users can 'Sign in' to watch restricted content. Is this working for you? What happens if users are using Internet Explorer without signing in?
psydii Posted January 15, 2016 Posted January 15, 2016 Take a look at this: http://www.edugeek.net/showpost.php?p=1406340 Teachers can then authorise access for students. 1
fiza Posted January 15, 2016 Posted January 15, 2016 Take a look at this: Youtube configuring a conditional DNS forwarding rule on Server 2013 Teachers can then authorise access for students. I have tried putting the conditional forwarders in but this made all authorised youtube users have unrestricted access. I have looked at unrestricted access and some of the video thumbnails showed inappropriate images. As most teachers display their screens on the board I don't want any searches they do to display inappropriate images. What I wanted to do was have a limited number of users as "approvers". Tried this and approved a couple of videos. Users cant search for the approved videos nor can they view them if I give them the actual URL. It still comes up as blocked.
psydii Posted January 15, 2016 Posted January 15, 2016 Are the non-approver users actually logged into YouTube with their GAfE accounts?
fiza Posted January 15, 2016 Posted January 15, 2016 Are the non-approver users actually logged into YouTube with their GAfE accounts? Yes they are. i have raised a case with LGfL and they are looking into it for me.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now