ScrubITLifehacker recommended ScrubIT today, a DNS service that “scrubs out the bad stuff.” Similar to OpenDNS they intercept misspelled phishing sites but also scrubs pornography and malicious sites.

ScrubIT looks like a simple way to get basic content filtering on your machine or network, simply by changing your DNS. We have been struggling to find a good content filter solution for the church, we did deploy DansGuardian, but it was quite a bit of work to setup and has a few issues, especially when working with SSL. We were able to start using ScrubIT with just a few seconds of work.

To use ScrubIT your must change your DNS to:
67.138.54.100
207.225.209.66

For the individual user, ScrubIT offers a DNS Config Utility that configures Windows XP or 2000.

OpenDNS has instructions on how to configure other operating systems, routers and DNS forwarding. To use ScrubIT with those instructions, just replace the OpenDNS addresses with the SrcubIT addresses (sorry OpenDNS).

From an enterprise perspective, OpenDNS looks to be much more mature, offering DNS servers in five different locations and a system status page. Hopefully ScrubIT will provide the same features soon.

We decided to go ahead try out ScrubIT at the church, we are running DNS on our Windows Server 2003. We configured forwarders to ScrubIT DNS IP addresses.

Win2k3 DNS Forwarders set to ScrubIT

For more control, ScrubIT is running a beta program that let’s you customize DNS to specifically allow or deny websites. It would be great if they added reporting as well.