Forum Discussion
How to block Bing Chat public for organization users and allowing Bing Chat Enterprise
Bing Chat Enterprise is made available for enterprise users. However there is possibility that users might be using Bing Chat public. Is there a way to force BCE for Organization users and block Bi...
You can block the public version of Bing chat by creating a CNAME in DNS for www.bing.com that points to nochat.bing.com. Of course if you are running MS DNS servers this task is nearly impossible without screwing up the rest of the bing.com domain. What I had to do was install DNS on a secondary server that my clients do not use directly with the primary zone bing.com and a CNAME for www pointing to nochat.bing.com. Then I setup a conditional forwarder for www.bing.com on my real DNS servers that forwards the request to the secondary server.
But how do you create a primary zone bing.com and a CNAME for www pointing to nochat.bing.com hosted by bing.com DNS servers? Won't the secondary DNS server also be answering for nochat.bing.com? Since the bing.com zone is on it.
Wouldn't you need to create a A record for nochat.bing.com as well? Thereby losing the whole point of using a CNAME?
No, because you only have a conditional forwarder setup for www.bing.com which then forwards to the secondary DNS server that holds the CNAME for www.bing.com which sends the client to nochat.bing.com which would be queried on the primary DNS server. Since there is no bing.com domain on the primary and no conditional forwarder it will use either root hints or your regular forwarders to lookup nochat.bing.com.
Yes, you are right! I just figured it out as well. It only forwards the www.bing.com query to my secondary DNS server. nochat.bing.com it looks up via bing.com DNS servers. Works like a charm.
🙂