I want to prevent my daughter from accessing YouTube while she's attending school. So I was thinking to add protections in iptables. Unfortunately, when she goes to YouTube, the DNS resolves to IP addresses which reverse lookup to
1e100.net (which is owned by Google, no worries there,) so... a reverse lookup block is not possible or is it?
What other way do I have at my disposal to block such accesses?
1e100.net gateways (load balancers) to all the Google services or is each computer specific to one service? (i.e. if I block that specific IP address, would I also be blocking say Google Sheets, Google Translation, etc.?)
I've also blocked the DNS, but obviously if the computer keeps its cache, my server can't prevent connection attempts to old IPs cached on my daughter's computer.
One thing I tried without much success:
/sbin/iptables -A daughter -i eth1 -m string --string "youtube.com" --algo bm -j REJECT /sbin/iptables -A daughter -i eth1 -m string --hex-string "|07|youtube|03|com" --algo bm -j REJECT
These rules block requests with SNI and DNS requests to get any
youtube.com IP address.