User Profile
Paul-Flores
Copper Contributor
Joined 9 months ago
User Widgets
Recent Discussions
Re: How to block Bing Chat public for organization users and allowing Bing Chat Enterprise
Bradley Fox, great hack! I'll mention that anyone using some kind of DNS firewall or Response Policy Zone for DNS can easily create a policy rule to match both names and have the DNS server artificially generate the CNAME response without all the configuration flaming hoops... As Microsoft DNS Policies do not appear to support a redirect action (see: https://learn.microsoft.com/en-us/powershell/module/dnsserver/add-dnsserverqueryresolutionpolicy?view=windowsserver2022-ps), one is left to implement the feature at the forwarding/recursion/caching level of your DNS infrastructure with BIND or other non-microsoft DNS solutions. https://bind9.readthedocs.io/en/latest/chapter6.html#dns-firewalls-and-response-policy-zones for examples of how to get RPZ to generate a CNAME based on a policy match. And RPZ is a standard feature on pretty much any Protected DNS service out there.5.4KViews0likes0Comments