On Fri, Oct 7, 2011 at 7:03 AM, Mohan Sundaram <mohan.tux at gmail.com> wrote:
However people can easily bypass this using a public DNS service like google
Is your gateway the local dns resolver for your network? If not, you
can do that redirecting all dns requests going out to the gateway's
resolver itself using iptables. Then, in the etc/hosts file of the
gateway, you can resolve gmail to any address you want locally that
will serve out the error page saying "gmail not allowed" etc.