On Sat, Aug 7, 2010 at 5:13 PM, Mike Pfaiffer high.res.mike@gmail.comwrote:
The teacher at the lab is absolutely sold on the idea of using the
hosts file to block out places like porn sites, gambling sites, facebook, and places like the pirate bay. For classroom machines I can see his point. Particularly since they are going through a different subnet than we are.
Doing that at the DNS level misses out on proxies, any site with DNS wildcards, and also relies on the application to Do The Right Thing. Your friend might want to spend some time configuring Squid in transparent proxy mode. There's also the Squidguard redirector that makes blocking bad sites easier.
Sean