Do you actually not get it? Think for 2 minutes - can a new site be opened tomorrow?
Finished thinking for 2 minutes and I still don’t understand. Can you elaborate
Can anyone explain this to him - I am busy now. if not I will call you later to explain
1 Like
Does anyone know what he’s talking about?
It’s fine you don’t have to call lol
It’s probably you are talking about http code 302 while he is talking about 301.
What?! Was that English?!
Temporary vs permanent redirect.
It’s actually a 303, which is somewhere in between.
(Verified with curl)
Difference (in our context) is whether the original URL stays, or the new URL is current.
If the URL is the original, youtu.be would be open, if it’s the redirected URL, youtu.be will still be blocked, resolving to youtube.com.
I see. And which one is it?
I’m not sure how it works for that. as mentioned, it’s a 303, but I don’t know how it handles that.
But that’s what you and shalom are arguing about. whether it will bypass the filter, or not.
1 Like
The only time it will bypass the filter is if in the redirect the site refers a raw ip address (so no more dns solving is necessary) and not a domain name which doesn’t work for big sites like YouTube for a number of reasons.
Usually a redirect refers to a domain name which means that you will then need to solve it, which would then fail in the private dns server
So @YourMenahel is right for most redirects and for big websites, but there are exceptions
1 Like
It seems that @shalom_karr is trying to make a completely different point: if you use a blacklist, any site not specifically blocked will be left open, which means that if someone creates a new website, it will be allowed until someone finds it and specifically blocks it. This means that it is almost impossible to make the filter 100% perfect because there will always be websites that were never caught.
2 Likes
That I agree with.
Thanks for dumbing it down to their level - I appreciate it @SILB
1 Like
Not sure if I would call that a ‘bypass’ but whatever
Noted and taken on board. I have made some minor changes to the wording.
1 Like
I noticed that the name of this thread has changed. Please, this is not an MDM solution so can I suggest/request that the thread be changed again to:
Free Frum Phone DPC — Device Policy Controller
That’s the actual Android platform term for any app deploying Device Owner provisioning implementation.
A full MDM product is a DPC plus a backend console, fleet enrollment, and remote policy management. ShomerDNS is a self-managed (single-device, local) DPC, it uses the same OS level mechanism, just to lock down the one device it’s installed on, controlled locally via PIN instead of remotely via a server.
1 Like