|
|||||||
 |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
07-06-2006, 02:13 PM
|
#1 |
|
Member (8 bit)
Join Date: Mar 2004
Posts: 213
|
How to restrict Internet access?
Is there a way to restrict what sites the user can and/or can't access by using Group Policy from the domain server? If not, what other options?
Thanks! |
|
|
|
07-06-2006, 02:20 PM
|
#2 |
|
Professional gadfly
Join Date: Jan 2002
Location: Minneapolis, MN
Posts: 6,364
 |
I don't think Group Policy will work for selectively blocking websites. You will either need some kind of proxy/filtering software, or proxy/filtering/router hardware.
|
|
|
|
|
07-06-2006, 02:36 PM
|
#3 |
|
Member (8 bit)
Join Date: Mar 2004
Posts: 213
|
Thank you for your response. Do you know of any free software for filtering sites that we want to allow?
|
|
|
|
|
07-06-2006, 02:45 PM
|
#4 |
|
Moderator
Staff
Premium Member
Join Date: May 2004
Location: Baltimore, MD
Posts: 2,918
 |
What kind of scale? If it's on a relatively small one, Endian Firewall has a content filter built in.
__________________
Computer: Intel Core i5-750 2.66 GHz quad-core processor @ 3.71 GHz | Asus P7P55D-E motherboard | Crucial 4 GB DDR3-1333 RAM | nVidia GeForce 8600GT | 2x WD Caviar Black WD1501FASS 1.5TB hard drives in RAID 1 | Antec Sonata III case with Antec EarthWatts 500-watt PSU | Dual Dell UltraSharp 2408WFP 24" widescreens | Windows 7 Ultimate 64-bit Other: 2005 Subaru Legacy 2.5GT sedan 5MT | Samsung Epic 4G Smartphone | Mamiya M645 1000S medium-format SLR with 55mm f/2.8, 70mm f/2.8, 210mm f/4, teleconverter, 120 and 220 film backs | Olympus E-PL1 Micro-4/3s DSLR with 14-42mm and 40-150mm lenses |
|
|
|
|
07-06-2006, 02:50 PM
|
#5 |
|
Member (8 bit)
Join Date: Mar 2004
Posts: 213
|
It is only for 12 comptuers. Here's what I'm looking to be able to do. When the user logs into the computer and open Internet Explorer, he/she is limited to a list of allow sites only. If he/she goes behond this list of allow sites, Internet Explorer would not display anything or something to that effect.
|
|
|
|
|
07-06-2006, 02:52 PM
|
#6 |
|
Moderator
Staff
Premium Member
Join Date: May 2004
Location: Baltimore, MD
Posts: 2,918
|
12 computers? Easy. Endian Firewall also has custom whitelists, which sounds like what you want to do. The limitation is that the computer that Endian Firewall is running on must be the default gateway for those computers, so it's easiest if they're in the same geographical location or are on the same switch.
|
|
|
|
|
07-06-2006, 03:01 PM
|
#7 |
|
Member (8 bit)
Join Date: Mar 2004
Posts: 213
|
Good news then. Here's what I have. All the 12 computers are connected to a switch along with the domain server. Routing and Remote access is installed on this domain server to allow the computers to access the Internet. So if I'm going to use Endian Firewall, I will install it on the domain server, correct?
|
|
|
|
|
07-06-2006, 03:26 PM
|
#8 |
|
Member (8 bit)
Join Date: Mar 2004
Posts: 213
|
Okay, another question. We are using Routing and Remote Access sevice, will I be able to do what I wanted just with this service?
|
|
|
|
|
07-06-2006, 03:28 PM
|
#9 |
|
Moderator
Staff
Premium Member
Join Date: May 2004
Location: Baltimore, MD
Posts: 2,918
|
No. Endian Firewall is a turnkey Linux distro. Get a computer (PIII would be fine), put in at least two network cards (more if you want a DMZ or wireless zone), and install Endian on that computer. After it's installed, put it between the switch and the internet, and use the web-based interface to configure DHCP and proxy (the filter is in the proxy setup).
http://www.efw.it/ |
|
|
|
|
07-06-2006, 03:31 PM
|
#10 | |
|
Moderator
Staff
Premium Member
Join Date: May 2004
Location: Baltimore, MD
Posts: 2,918
|
Quote:
|
|
|
|
|
|
07-06-2006, 03:35 PM
|
#11 |
|
Forum Administrator
Staff
Premium Member
Join Date: May 2000
Location: Joplin MO
Posts: 37,786
|
Microsoft ISA Server running on the domain server may be able to do what you want. Just a guess.
|
|
|
|
|
07-06-2006, 03:35 PM
|
#12 |
|
Moderator
Staff
Premium Member
Join Date: May 2004
Location: Baltimore, MD
Posts: 2,918
|
Probably, but that's $$$.
|
|
|
|
|
07-07-2006, 03:34 PM
|
#13 |
|
Member (8 bit)
Join Date: Mar 2004
Posts: 213
|
yes, that is true. I do not want to spend the money to do this. I saw this page, http://www.howtonetworking.com/Inter...strictie11.htm.
Well, I tried it and seems to work...except the Exception site list are not working. Any idea? |
|
|
|
|
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
Linear Mode
