Solved

Internet Access Using White List Only

Posted on 2004-10-07
9
394 Views
Last Modified: 2013-12-04
Hi all,

I'd like to limit internet access on one of my office computers to a list that I define ("white list").  I know there are a couple programs that do this and more (spectorsoft), but I'm looking for something that does only this .... the browser on the computer is IE 6.0, and I'm not concerned about blocking other applications other than IE 6.0.

The OS is Win 2000 PRO.

Thanks in advance for your help.

B.
0
Comment
Question by:bmelnick
  • 2
  • 2
  • 2
9 Comments
 
LVL 57

Accepted Solution

by:
Pete Long earned 250 total points
Comment Utility
Filtering Internet access

*****Method one******
Pro's EASY TO DO.    CON's NOT GOOD FOR LOTS OF CLIENTS.

How you approach this depends on how many users you are talking about, if its just a few users, the simplest way is to modify the host file on each PC and put an entry in it for each domain you DONT want the users to access and point them to 127.0.0.1 (you can edit the hostile with notepad or this, http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.exe
For example to block www.hotmail.com add this line to the end of the host file.

127.0.0.1     www.hotmail.com

NB in win 95/98/ME the host file is at C:\windows\hosts.sam (save it WITHOUT the. Sam extension and reboot)
In windows 2000 the host file is at C:\winnt\system32\drivers\etc\hosts (you can edit directly and NO reboot is required)
In Windows XP the host file is at C:\windows\system32\drivers\etc\hosts (you can edit directly and NO reboot is required)

*****Method Two*****
Pro's Easy to administer. CON's Expensive & NOT PRACTICAL FOR HOME USERS.

Give all your clients access to the Internet via a Proxy Server than can filter and block websites.
ISA Server http://www.microsoft.com/isaserver/
WinProxy http://www.winproxy.com/index.asp

*****Method Three*****
Pro's Very scalable from home user to businesses.  CON's Can Be Expensive

Use some third party software to do it for you.

Home Users see
Net Nanny http://store.netnanny.com/dr/v2/ec_dynamic.main?sp=1&pn=12&sid=53
Cyber Sitter http://www.cybersitter.com/
Home users/Small business's See
CyberPatrol http://www.cyberpatrol.com/
Business's See
WebSense http://www.websense.com/
WebMarshal http://www.nwtechusa.com/webmarshal.php?iorb=4764&sc=106

*****Other options*****
How do I use IPSec IP filter lists?
http://www.jsifaq.com/subj/tip4500/rh4554.htm

How can I block a Windows 2000/XP/2003 computer from surfing on the Internet?
http://www.petri.co.il/block_web_browsing_with_ipsec.htm

Internet Explorer Administration Kit (IEAK) 6 SP1 enables the most cost-effective and efficient way to deploy and manage Web-based solutions.
http://www.microsoft.com/windows/ieak/default.mspx
0
 

Author Comment

by:bmelnick
Comment Utility
Method one is the closest, just in reverse of what I'm hoping for.

A lot of the options in Method 3 I'm familiar with, however I would like something not as robust as those options.

B
0
 
LVL 25

Assisted Solution

by:mikeleebrla
mikeleebrla earned 250 total points
Comment Utility
all you have to do is go to the computers network card configuration and do not list any DNS server.  That way whenver the user types in www.google.com for example, there will be no DNS server to resolve www.google.com to google's IP address.

as far as the part about letting the user get to SOME sites (or your local servers)  all you have to do is edit the hosts file and manually put in the DNS names and correct IP addresses of the sites/servers.  

The host file is located at:  C:\windows\system32\drivers\etc\  open the file hosts with notepad and edit it.

0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:bmelnick
Comment Utility
Mike,

So, correct me if I'm wrong ....

Remove DNS server settings from the TCP/IP settings.  This will only enable people to type in the actual IP address for the website they are searching for (not a big concern as I'm dealing with computer retarded people.

Then edit the hosts file and put in eg:
64.233.167.99      www.google.ca


I assume this will affect all programs that use the internet (MSN Messenger, mySQL accessing a remote location, etc ...)

Thanks,
B
0
 
LVL 57

Expert Comment

by:Pete Long
Comment Utility
correct
correct
correct = and domains if you have them

:)
0
 
LVL 25

Expert Comment

by:mikeleebrla
Comment Utility
as pete said,, that is correct
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Suggested Solutions

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now