Trouble with Force Google safe search

In order for the Force Google safe search to work, the DNS server must be inside the Rocket Appliance and not have any path to the Internet that is not filtered.

Let’s test the Force Google safe search feature.

Do an nslookup for www.google.com.

  • If you get www.l.google.com then the force Google safe search will not work correctly. It means that either an internal DNS server already has www.google.com in its cache or the DNS server is not sitting behind the Rocket and has a clear path to the Internet.
  • If you return forcesafesearch.google.com then you should not be able to access non safe search results.

Additional Information:

When you do a DNS lookup for www.google.com what actually will be returned is www.l.google.com. The IP addresses for l.google.com are determined by your location. The Lightspeed Systems Rocket watches for DNS requests for www.google.com and hijacks the return. Instead of returning www.l.google.com, we return forcesafesearch.google.com with a set of location specific IPs.

Note: Forcing Google Safe Search is a DNS remap and therefore is a global setting unless users want to set up separate DNS servers for staff vs. students.