Any way to block internet access except for a handfull of sites?

Doomer

Diamond Member
Dec 5, 1999
3,721
0
0
I need a way to block access to all websites except for a handful and be able to do this on a per PC basis. At first, this sounded easy but it don't look that way. :(

TIA

 

Kelemvor

Lifer
May 23, 2002
16,928
8
81
on a Per PC basis? So some PC scan get to some sites and others can not? No idea on that one.
 

RebateMonger

Elite Member
Dec 24, 2005
11,586
0
0
If you have any Windows 2000 or 2003 Servers, you can easily do this with Microsoft's ISA Server 2004. You can set access to sites by User or by Computer. It it would take a few minutes to implement this Firewall Rule. The toughest part would be typing in the URLs of the sites you want to allow.

Windows Small Business Server 2003, Premium Edition, includes ISA Server 2004. The software retails for $1500 and can be obtained for as little as $1000.
 

Doomer

Diamond Member
Dec 5, 1999
3,721
0
0
Thanks

I found an easy way to do this using Group Policies. Just set the PC to use a fake proxy server (I used 127.0.0.1) then list the site you want to allow under exceptions. These sites will bypass the fake proxy server. This has the added benefit of blocking any and all 3rd party banner ads.
 

MixMasterTang

Diamond Member
Jul 23, 2001
3,167
176
106
Well if you wanna do it the poor mans way, setup Internet Explorer to use a Proxy server, give it a fake proxy address but add the "allowed" sites to the "Exceptions: Do not use a proxy server for addresses beggining with" section. Create a GPO and restrict changes if this is a domain envrioment.
 

RebateMonger

Elite Member
Dec 24, 2005
11,586
0
0
Originally posted by: Doomer
I found an easy way to do this using Group Policies. Just set the PC to use a fake proxy server (I used 127.0.0.1) then list the site you want to allow under exceptions.
That should work as long as users don't use another web browser besides I.E.

That's one nice thing about ISA. It will block by PROTOCOL. No matter what web browser is used. And you can't get encrypted traffic by, either. It'll decrypt it, see what it is, and if acceptable, it'll resend it.
 

FreshPrince

Diamond Member
Dec 6, 2001
8,361
1
0
Originally posted by: RebateMonger
Originally posted by: Doomer
I found an easy way to do this using Group Policies. Just set the PC to use a fake proxy server (I used 127.0.0.1) then list the site you want to allow under exceptions.
That should work as long as users don't use another web browser besides I.E.

software firewall, block anything (ie. firefox) but IE :)