Creating CNAME Using Orbi to Enforce Google.com SafeSearch
I saw a couple older posts from 2017/2018 saying the following was not possible.
Is it still impossible, using Orbi, to force all devices on my home network to go to forcesafesearch.google.com?
1. Add a new CNAME record on your local DNS server for your local Google domain(s) pointing to forcesafesearch.google.com. For this example, we will be using www.google.com. Create a CNAME record for www.google.com that points to forcesafesearch.google.com.
2. Clear your DNS cache of the saved www.google.com record.
3. Make a new search and you should be prompted that SafeSearch is enabled. As long as this CNAME record is in place, SafeSearch will be enforced on the network.
An example configuration on Windows Server 2012 can be seen below for the A-Record equivalent. For the CNAME, create a CNAME record pointing www.google.com to forcesafesearch.google.com.
You may need to add a www.google.com zone and provide an A record override for www.google.com to 216.239.38.120 (forcesafesearch.google.com) depending on your DNS server setup.
**If you have a Virtual Appliance or Roaming Clients, you must also add www.google.com to the internal domains list**
That's it. Your network is now configured to enforce SafeSearch for all computers utilizing your local DNS server. To confirm it's active, the first time you visit google.com, a message will appear on the top of the screen confirming SafeSearch is force enabled.
My sense is that nothing has changed about the way Orbi routers process DNS. There is no method for the user to create DNS definitions for devices on the LAN or to create a CNAME entry.
All the user can do is specify which DNS services the Orbi will forward DNS queries to. OpenDNS, for example, has a "free" feature which allows users to specify search criteria. https://www.opendns.com/home-internet-security/
Modern web browsers have settings to regulate content.
Some Orbi owners report implementing Pi-hole (or pfSense) servers to handle DNS. Both of these are capable of creating the DNS entries described in those articles. The Orbi DNS is pointed to Pi-hole to resolve DNS and Pi-hole takes it from there.
The key in all this is that any user can simply modify the network settings on any specific device to use whatever DNS service they want. And thus by-pass these controls.
• Introducing NETGEAR WiFi 7 Orbi 770 Series and Nighthawk RS300
• What is the difference between WiFi 6 and WiFi 7?
• Yes! WiFi 7 is backwards compatible with other Wifi devices? Learn more