Device specific website filtering using a bifurcated domain name system

At least one machine readable medium including instructions for website filtering using bifurcated domain name system (DNS) that, when executed by a machine, cause the machine to perform operations to:

• receive a DNS request, the DNS request including a hostname corresponding to a website and a device identifier for a requesting client computing device;
• forward the DNS request to both an internet address for the DNS service of the internet service provider (ISP), the ISP providing external network services to the services gateway;
• forward the DNS request and the device identifier to an internet address for the DNS filtering service provider external to the ISP, the DNS service provider maintaining one or more website filtering policies;
• receive a first response to the DNS request from the DNS service of the ISP;
• receive a second response to the DNS request from the DNS filtering service provider external to the ISP, wherein the second response includes a grant/block status identifier;
• determine a DNS request response based on the grant/block status identifier, wherein the DNS request response comprises either the first response or a denial message;
• and
• transmit the DNS request response to the requesting client computing device, the requesting client computing device connected to an internal network provided by the service gateway.

A method for website filtering using bifurcated domain name system (DNS), the method comprising:

• receiving, by a services gateway, a DNS request, the DNS request including a hostname corresponding to a website and a device identifier for a requesting client computing device;
• forwarding the DNS request to an internet address for the DNS service of the internet service provider (ISP), the ISP providing external network services to the services gateway;
• forwarding the DNS request and the device identifier to an internet address for the DNS service provider external to the ISP, the DNS service provider maintaining one or more website filtering policies;
• receiving a first response to the DNS request from the DNS service of the ISP;
• receiving a second response to the DNS request from the DNS filtering service provider external to the ISP, wherein the second response includes a grant/block status identifier;
• determining a DNS request response based on the grant/block status identifier, wherein the DNS request response comprises either the first response or a denial message;
• and
• transmitting, the DNS request response to the requesting client computing device, the requesting client computing device connected to an internal network provided by the service gateway.