allow / block based on windows username

[q16marvin]

Hi,

is there anyway to allow or block dns request based on windows username?

i have a smal windows active directory enviroment (based on univention samba). all clients use technitium dnsserver as primary dns server. it would be awesome if i could setup that user a,b,c could reach all websites on a whitelist and user d,f could reach any website.

is there any option?

[ShreyasZare]

Thanks for asking. The DNS server cannot know the username of the clients so such an option is not possible to implement. The DNS server can use the client IP though. You can install the Advanced Blocking DNS app which allows creating groups and mapping them to IP/subnets. So, if you have your network setup done such that you can group users into specific subnets/IP addresses then you can configure the app to map to a specific group name and the config you have in that group will apply to those users.

Let me know if you have any queries.

[q16marvin]

thank you very much for your quick response :) Unfortunately IP based White or Blacklist is not realy possible.

maybe via api? so for example on every client a small service is running and send ip and windows username to dns server and and dns server received dns request from client with ip, lookup which user is currently on this ip and allow or block the query?

[ShreyasZare]

This is very specific use-case so making a feature for it will not really be feasible. This will need major updates to the way the DNS app works and also will need a separate client side app that uses the API. Its not something that can be implemented quickly.

[q16marvin]

yes i know, im searching since many years for a simple solution to allow my users only a whitelist of websites and for specified users allow all websites. i thought im not the only one who had such use case, but seems so ^^