K-12 AI Content Filtering Guide
Content Filters · DNS Filters · Web Gateways

# Cloud Content Filter — Custom Category Configuration
# Navigate to: Filter → Categories → Custom Categories → New

Category Name:     "AI Tools"
Category Type:     Custom URL List
Default Action:    Block
Block Page:        "This AI tool is blocked per district policy."

# External feed configuration
# Feed file hosted internally, regenerated daily from the API CSV
# (see the sync scripts below)
Feed URL:          https://filter.district.internal/ai-domains.txt
Feed Format:       Plain text (one domain per line)
Refresh Interval: 86400 # seconds (24 hours)

# Policy assignment
Apply to:          Students OU
Schedule:          Always # or set testing-period schedule
Override:          Allow teachers to bypass via Classroom Management Tool

# Verification — test from a student device:
$ curl -s -o /dev/null -w "%{http_code}" https://chatgpt.com
# Expected: 403 or redirect to block page

# PowerShell — Multi-Filter AI Blocklist Deployment
# Schedule: Daily at 05:00 via Task Scheduler
# Requires: PowerShell 5.1+, network access to filter APIs

$ErrorActionPreference = "Stop"
$LogPath = "C:\Logs\AI-Blocklist\sync-$(Get-Date -Format 'yyyy-MM-dd').log"

function Write-SyncLog($Message) {
    $Timestamp = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
    "[$Timestamp] $Message" | Tee-Object -FilePath $LogPath -Append
}

# Step 1: Fetch the latest AI Tools Blocklist
Write-SyncLog "Fetching AI Tools Blocklist feed..."
$Headers = @{ "X-API-Key" = $env:BLOCKLIST_API_KEY }
$FeedUrl = "https://www.aitoolsblocklist.com/api/database/?action=download_database"
# CSV columns: domain,category,subcategory — take the first column, skip the header
$Domains = (Invoke-RestMethod -Uri $FeedUrl -Headers $Headers).Split("`n") |
    Select-Object -Skip 1 |
    ForEach-Object { ($_ -split ",")[0] } |
    Where-Object { $_.Trim() -ne "" }

Write-SyncLog "Downloaded $($Domains.Count) AI tool domains"

# Step 2: Save local copy for audit trail
$LocalPath = "C:\Data\AI-Blocklist\current-feed.txt"
$Domains | Out-File -FilePath $LocalPath -Encoding UTF8
Write-SyncLog "Local copy saved to $LocalPath"

# Step 3: Push to content filters in parallel
$Jobs = @()

# DNS-based filter update
$Jobs += Start-Job -ScriptBlock {
    param($Domains, $Key, $OrgId)
    $Body = $Domains -join "`n"
    Invoke-RestMethod -Method Put `
        -Uri "https://api.your-content-filter.example.com/v1/orgs/$OrgId/custom-urls/ai-tools" `
        -Headers @{ "Authorization" = "Bearer $Key" } `
        -Body $Body -ContentType "text/plain"
} -ArgumentList $Domains, $env:FILTER_API_KEY, $env:FILTER_ORG_ID

# Wait for all jobs and log results
$Jobs | Wait-Job | ForEach-Object {
    $Result = Receive-Job -Job $_
    Write-SyncLog "Filter update completed: $($_.Name)"
}

Write-SyncLog "All filters updated successfully"

#!/bin/bash
# /opt/scripts/ai-blocklist-health-check.sh
# Run daily via cron — alerts on feed staleness or block failures

API_KEY="your-api-key"
ALERT_EMAIL="[email protected]"
MIN_DOMAINS=40000
SAMPLE_DOMAINS=("chatgpt.com" "claude.ai" "quillbot.com" "perplexity.ai")

# Check 1: Database freshness — poll database_info for last_updated_unix
LAST_UPDATED=$(curl -s -H "X-API-Key: $API_KEY" \
  "https://www.aitoolsblocklist.com/api/database/?action=database_info" |
  grep -o '"last_updated_unix":[0-9]*' | cut -d: -f2)
echo "Database last updated: $(date -d @"$LAST_UPDATED")"

# Check 2: Domain count — download the CSV, skip the header row
DOMAIN_COUNT=$(curl -s -H "X-API-Key: $API_KEY" \
  "https://www.aitoolsblocklist.com/api/database/?action=download_database" |
  tail -n +2 | wc -l)
echo "Domain count: $DOMAIN_COUNT"

if [ "$DOMAIN_COUNT" -lt "$MIN_DOMAINS" ]; then
  echo "WARNING: Domain count below threshold ($DOMAIN_COUNT < $MIN_DOMAINS)" |
    mail -s "AI Blocklist Alert: Low Domain Count" "$ALERT_EMAIL"
fi

# Check 3: Sample block verification from student VLAN
FAILURES=0
for domain in "${SAMPLE_DOMAINS[@]}"; do
  RESULT=$(nslookup "$domain" 10.0.50.1 2>&1)  # student DNS resolver
  if echo "$RESULT" | grep -q "NXDOMAIN\|SERVFAIL\|0.0.0.0"; then
    echo "PASS: $domain is blocked"
  else
    echo "FAIL: $domain resolved — block may not be active"
    FAILURES=$((FAILURES + 1))
  fi
done

if [ "$FAILURES" -gt 0 ]; then
  echo "$FAILURES sample domains resolved — check content filter config" |
    mail -s "AI Blocklist Alert: Block Verification Failed" "$ALERT_EMAIL"
fi