Highly restricted Internet access
Posted on 2007-10-10
I have a client who has a small network (Single W2k3 SBS server, 8 workstations), they have a policy that only certain users are allowed Internet access but some users are blocked from accessing the Internet. At the moment I am using AD to set the gateway to an incorrect address for the users they wants to block from Internet access and this has always worked well but now the requirement is changing. What they now want is to block the users from accessing the web EXCEPT for a small list of approved sites that they require for business. The users sit at the same workstations all of the time so a locally installed software package would be great but I have no knowledge of anything suitable and suspect that the requiement is different from most as we want to block all websites except a few rather than allow all except a few.
It may be that the 'popular' products such as netnanny, cyber patrol etc. can do this and if so it's an easy 500 points for somebody, cheaper is better and free is best! They have a Vigor router of some description, I forget which model exactly but it's a typical home/small business router and I doubt that it would be capable of this sort of filtering.
I may be able to do this by using a hosts file or entries in the routing table but software that is designed for this purpose is favourite.