Block navigation on all not white-listed domains


I set a VPN Server, but I would like to allow the VPN Clients to be able to navigate only a couple of domains.
So by defaults all domains shall be black-listed and only few (no more than 10 domains and their subdomains) shall be white-listed.

Let’s suppose I only want white-listed, how to achieve this?

I read about dns-filtering and I tried the following:

uci add_list dhcp.@dnsmasq[0].server=‘/*/#’
uci add_list dhcp.@dnsmasq[0].server=‘/’
uci commit dhcp
/etc/init.d/dnsmasq restart

but I am still able to navigate with no restrictions

Any idea on this?

Thanks for support.

I don’t think that you can achieve that without using a professional firewall. The problem is that DNS filtering isn’t reliable.

A device can just use a different DNS server instead.

1 Like