encrypted.google.com is supported as SNI on the forcesafesearch VIP; so is ipv6.googl...

diff --git a/pdns/recursordist/examples/safesearch.lua b/pdns/recursordist/examples/safesearch.lua
index dd7c5b39fc64afade902f6302e98a4ad1fac2375..2eaa61bc870c4af3aa6e846bb8ad7b74e5f25765 100644 (file)
--- a/pdns/recursordist/examples/safesearch.lua
+++ b/pdns/recursordist/examples/safesearch.lua
@@ -18,8 +18,8 @@ googledomains={}
 for k,v in pairs(dofile("googledomains.lua"))
 do
     googledomains["www"..v]=1
-    googledomains["encrypted"..v]=2  -- this will allow you to search unfiltered
-    googledomains["ipv6"..v]=2       -- this too
+    googledomains["encrypted"..v]=1  -- plug a loophole
+    googledomains["ipv6"..v]=2       -- this too - change to 1 to get v4 instead of NXDOMAIN
 end