• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 447
  • Last Modified:

Internet Access Using White List Only

Hi all,

I'd like to limit internet access on one of my office computers to a list that I define ("white list").  I know there are a couple programs that do this and more (spectorsoft), but I'm looking for something that does only this .... the browser on the computer is IE 6.0, and I'm not concerned about blocking other applications other than IE 6.0.

The OS is Win 2000 PRO.

Thanks in advance for your help.

B.
0
bmelnick
Asked:
bmelnick
  • 2
  • 2
  • 2
2 Solutions
 
Pete LongTechnical ConsultantCommented:
Filtering Internet access

*****Method one******
Pro's EASY TO DO.    CON's NOT GOOD FOR LOTS OF CLIENTS.

How you approach this depends on how many users you are talking about, if its just a few users, the simplest way is to modify the host file on each PC and put an entry in it for each domain you DONT want the users to access and point them to 127.0.0.1 (you can edit the hostile with notepad or this, http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.exe
For example to block www.hotmail.com add this line to the end of the host file.

127.0.0.1     www.hotmail.com

NB in win 95/98/ME the host file is at C:\windows\hosts.sam (save it WITHOUT the. Sam extension and reboot)
In windows 2000 the host file is at C:\winnt\system32\drivers\etc\hosts (you can edit directly and NO reboot is required)
In Windows XP the host file is at C:\windows\system32\drivers\etc\hosts (you can edit directly and NO reboot is required)

*****Method Two*****
Pro's Easy to administer. CON's Expensive & NOT PRACTICAL FOR HOME USERS.

Give all your clients access to the Internet via a Proxy Server than can filter and block websites.
ISA Server http://www.microsoft.com/isaserver/
WinProxy http://www.winproxy.com/index.asp

*****Method Three*****
Pro's Very scalable from home user to businesses.  CON's Can Be Expensive

Use some third party software to do it for you.

Home Users see
Net Nanny http://store.netnanny.com/dr/v2/ec_dynamic.main?sp=1&pn=12&sid=53
Cyber Sitter http://www.cybersitter.com/
Home users/Small business's See
CyberPatrol http://www.cyberpatrol.com/
Business's See
WebSense http://www.websense.com/
WebMarshal http://www.nwtechusa.com/webmarshal.php?iorb=4764&sc=106

*****Other options*****
How do I use IPSec IP filter lists?
http://www.jsifaq.com/subj/tip4500/rh4554.htm

How can I block a Windows 2000/XP/2003 computer from surfing on the Internet?
http://www.petri.co.il/block_web_browsing_with_ipsec.htm

Internet Explorer Administration Kit (IEAK) 6 SP1 enables the most cost-effective and efficient way to deploy and manage Web-based solutions.
http://www.microsoft.com/windows/ieak/default.mspx
0
 
bmelnickAuthor Commented:
Method one is the closest, just in reverse of what I'm hoping for.

A lot of the options in Method 3 I'm familiar with, however I would like something not as robust as those options.

B
0
 
mikeleebrlaCommented:
all you have to do is go to the computers network card configuration and do not list any DNS server.  That way whenver the user types in www.google.com for example, there will be no DNS server to resolve www.google.com to google's IP address.

as far as the part about letting the user get to SOME sites (or your local servers)  all you have to do is edit the hosts file and manually put in the DNS names and correct IP addresses of the sites/servers.  

The host file is located at:  C:\windows\system32\drivers\etc\  open the file hosts with notepad and edit it.

0
WEBINAR: 10 Easy Ways to Lose a Password

Join us on June 27th at 8 am PDT to learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees. We'll cover the importance of multi-factor authentication and how these solutions can better protect your business!

 
bmelnickAuthor Commented:
Mike,

So, correct me if I'm wrong ....

Remove DNS server settings from the TCP/IP settings.  This will only enable people to type in the actual IP address for the website they are searching for (not a big concern as I'm dealing with computer retarded people.

Then edit the hosts file and put in eg:
64.233.167.99      www.google.ca


I assume this will affect all programs that use the internet (MSN Messenger, mySQL accessing a remote location, etc ...)

Thanks,
B
0
 
Pete LongTechnical ConsultantCommented:
correct
correct
correct = and domains if you have them

:)
0
 
mikeleebrlaCommented:
as pete said,, that is correct
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

WEBINAR: 10 Easy Ways to Lose a Password

Join us on June 27th at 8 am PDT to learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees. We'll cover the importance of multi-factor authentication and how these solutions can better protect your business!

  • 2
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now