From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Tue, 11 Oct 2016 11:23:10 +0000 (+0200)
Subject: encrypted.google.com is supported as SNI on the forcesafesearch VIP; so is ipv6.googl... 
X-Git-Tag: dnsdist-1.1.0-beta2~99^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=723e64e55bc0856a131e323ef8ac73ab4160ec6a;p=pdns

encrypted.google.com is supported as SNI on the forcesafesearch VIP; so is ipv6.google.com
---

diff --git a/pdns/recursordist/examples/safesearch.lua b/pdns/recursordist/examples/safesearch.lua
index dd7c5b39f..2eaa61bc8 100644
--- a/pdns/recursordist/examples/safesearch.lua
+++ b/pdns/recursordist/examples/safesearch.lua
@@ -18,8 +18,8 @@ googledomains={}
 for k,v in pairs(dofile("googledomains.lua"))
 do
     googledomains["www"..v]=1
-    googledomains["encrypted"..v]=2  -- this will allow you to search unfiltered
-    googledomains["ipv6"..v]=2       -- this too
+    googledomains["encrypted"..v]=1  -- plug a loophole
+    googledomains["ipv6"..v]=2       -- this too - change to 1 to get v4 instead of NXDOMAIN
 end