if your serious about going down the firewall route..
Hardware Firewalls
Cisco PIX
http://www.cisco.com/go/pi
The world-leading Cisco PIX® Security Appliance Series provides robust, enterprise-class, integrated network security services including stateful inspection firewalling, protocol and application inspection, virtual private networking (VPN), in-line intrusion protection, and rich multimedia and voice security-in cost-effective, easy-to-deploy solutions.
SonicWall
http://www.sonicwall.com/
SonicWALL Internet firewall/VPN security appliances support an array of security applications and deliver powerful firewall and VPN performance. SonicWALL appliances are built on stateful inspection firewall technology, and a dedicated security ASIC designed to ensure maximum performance for VPN enabled applications.
3Com
http://www.3com.com/prod/e
3Com perimeter firewalls and website filters cost-efficiently secure Internet access and give IT managers a critical first line of defence against network attacks and unauthorized access. For protecting the perimeter of your network, choose the 3Com® SuperStack® 3 Firewall for enterprise
NetGear
http://www.netgear.com/pro
set your firewall to allow TCP (Port 80) traffic to the two URL's you require and BLOCK port 80 to all other IP's
allow
Name: oag.com
Address: 198.80.15.75
and
Name: sabre.com
Address: 151.193.182.43
then block trafic outbound to everyone else
Main Topics
Browse All Topics





by: PeteLongPosted on 2004-08-15 at 05:59:13ID: 11803867
Filtering Internet access
hcd/VB_Pro jects/ Host sFileReade r.exe
etc\hosts (you can edit directly and NO reboot is required) s\etc\host s (you can edit directly and NO reboot is required)
saserver/ dex.asp
dr/v2/ec_d ynamic.mai n?sp=1&pn= 12& sid=53 / / ebmarshal. php?iorb=4 764&sc=106
/tip4500/r h4554.htm
ck_web_bro wsing_with _ipsec.htm
indows/iea k/default. mspx
*****Method one******
Pro's EASY TO DO. CON's NOT GOOD FOR LOTS OF CLIENTS.
How you approach this depends on how many users you are talking about, if its just a few users, the simplest way is to modify the host file on each PC and put an entry in it for each domain you DONT want the users to access and point them to 127.0.0.1 (you can edit the hostile with notepad or this, http://members.shaw.ca/tec
For example to block www.hotmail.com add this line to the end of the host file.
127.0.0.1 www.hotmail.com
NB in win 95/98/ME the host file is at C:\windows\hosts.sam (save it WITHOUT the. Sam extension and reboot)
In windows 2000 the host file is at C:\winnt\system32\drivers\
In Windows XP the host file is at C:\windows\system32\driver
*****Method Two*****
Pro's Easy to administer. CON's Expensive & NOT PRACTICAL FOR HOME USERS.
Give all your clients access to the Internet via a Proxy Server than can filter and block websites.
ISA Server http://www.microsoft.com/i
WinProxy http://www.winproxy.com/in
*****Method Three*****
Pro's Very scalable from home user to businesses. CON's Can Be Expensive
Use some third party software to do it for you.
Home Users see
Net Nanny http://store.netnanny.com/
Cyber Sitter http://www.cybersitter.com
Home users/Small business's See
CyberPatrol http://www.cyberpatrol.com
Business's See
WebSense http://www.websense.com/
WebMarshal http://www.nwtechusa.com/w
*****Other options*****
How do I use IPSec IP filter lists?
http://www.jsifaq.com/subj
How can I block a Windows 2000/XP/2003 computer from surfing on the Internet?
http://www.petri.co.il/blo
Internet Explorer Administration Kit (IEAK) 6 SP1 enables the most cost-effective and efficient way to deploy and manage Web-based solutions.
http://www.microsoft.com/w