Block AI Tools on School Networks
Without Blocking Learning

# Cisco Umbrella — Add AI Tools Blocklist as a Custom Integration
# Step 1: Navigate to Policies → Policy Components → Integration Lists
# Step 2: Click "Add New" → "Custom Feed URL"

Feed URL:  https://feeds.aitoolsblocklist.com/v1/domains/education.txt
Refresh:   3600 # seconds (hourly refresh)
Action:    Block
Category: AI Tools

# Step 3: Create or edit a DNS Policy
# Step 4: Under "Security Settings" → "Integration Lists"
#          → Enable the "AI Tools Blocklist" list
# Step 5: Apply the policy to the "Student-VLAN" identity

# Verification — test from a student device:
$ nslookup chatgpt.com
# Expected: NXDOMAIN or Umbrella block page

$ nslookup claude.ai
# Expected: NXDOMAIN or Umbrella block page

$ nslookup quillbot.com
# Expected: NXDOMAIN or Umbrella block page

# GoGuardian Admin — Custom AI Tools Block List
# Navigate to: Admin Console → Filtering → Custom Lists

# Option A: Manual CSV Upload (for districts preferring manual review)
1. Download the CSV: ai_tools_database_sample.csv
2. Extract the "domain" column into a newline-separated text file
3. In GoGuardian Admin → Custom Lists → "Create New List"
4. Name: "AI Tools Blocklist"
5. Action: "Block"
6. Paste or upload the domain list
7. Assign to: "Students" OU

# Option B: Automated sync via Google Workspace script
# This Apps Script fetches the latest feed and updates GoGuardian

function syncAIBlocklist() {
  const feedUrl = "https://feeds.aitoolsblocklist.com/v1/domains/all.txt";
  const response = UrlFetchApp.fetch(feedUrl, {
    headers: { "Authorization": "Bearer YOUR_API_KEY" }
  });
  const domains = response.getContentText().split("\n");
  Logger.log("Fetched " + domains.length + " AI tool domains");

  // Push to GoGuardian via their API
  // See GoGuardian API docs for custom list endpoints
}

# Example: Scheduled feed switching with a cron job on your DNS filter
# This script switches between testing and normal feeds

#!/bin/bash
# /opt/scripts/ai-blocklist-schedule.sh

TESTING_FEED="https://feeds.aitoolsblocklist.com/v1/domains/all.txt"
NORMAL_FEED="https://feeds.aitoolsblocklist.com/v1/domains/education-strict.txt"

# Check if today is a testing day (dates stored in a config file)
TODAY=$(date +%Y-%m-%d)
if grep -q "$TODAY" /etc/ai-blocklist/testing-dates.txt; then
    FEED_URL="$TESTING_FEED"
    echo "[$(date)] Testing period — full AI block active"
else
    FEED_URL="$NORMAL_FEED"
    echo "[$(date)] Normal period — selective AI block active"
fi

# Download the appropriate feed
curl -s -H "Authorization: Bearer $API_KEY" \
     "$FEED_URL" -o /var/lib/dns-filter/ai-blocklist.txt

# Reload the DNS filter (example for Pi-hole)
pihole restartdns reload-lists

echo "[$(date)] Feed updated: $(wc -l < /var/lib/dns-filter/ai-blocklist.txt) domains"