restricting internet access

[cliftonite]

Is there anyway to restric internet access on a PC so that it only has access to one website? This is for a terminal to allow users to create their AD accounts VIA a website.

We want to restrict access on the terminal to only that website. How can we do this? This is on a linux box. Thanks.

 

[zetsway]

Yes it is possible. You can do this in a number of ways.
1) Use a proxy. You can install it directly on the Linux box (i.e. Squid). Have all web sites go to 127.0.0.1
2) Edit the host file to make everything from www.* go to 127.0.0.1. You will need to add an exception for the website you want them to go to.
3) You mention AD. Than just use Group Policy, oh wait that’s for windows well get a windows box.
4) On your router deny outgoing traffic to any website. I would need to know what type of router you have but it’s simple.
5) Install an application to do it for you.

 

[cliftonite]

Yes it is possible. You can do this in a number of ways.
1) Use a proxy. You can install it directly on the Linux box (i.e. Squid). Have all web sites go to 127.0.0.1
2) Edit the host file to make everything from www.* go to 127.0.0.1. You will need to add an exception for the website you want them to go to.
3) You mention AD. Than just use Group Policy, oh wait that’s for windows well get a windows box.
4) On your router deny outgoing traffic to any website. I would need to know what type of router you have but it’s simple.
5) Install an application to do it for you.

I think #1 or #5 is the most likely solution. I doubt we can get access to router configuration (this is a large university).

 

[zetsway]

Ok, respond back to the thread if you need any help

 

[RadiclDreamer]

Give them no dns servers and lock it so they cant change it, host file for the website.

 

[zetsway]

Give them no dns servers and lock it so they cant change it, host file for the website.

I like

 

[RadiclDreamer]

I like

The only downside to this is they can always open a command prompt and do

nslookup google.com 4.2.2.2

and get the ip to use for a website, but that is unlikely.

 

[zetsway]

The only downside to this is they can always open a command prompt and do

nslookup google.com 4.2.2.2

and get the ip to use for a website, but that is unlikely.

If he is locking down the pc, the command prompt shouldn't be available.

 

[RadiclDreamer]

If he is locking down the pc, the command prompt shouldn't be available.

True, but if they want to get really crafty they can write down ips at home and bring them in, but we're getting way into the realm of unlikely here

 

[zetsway]

True, but if they want to get really crafty they can write down ips at home and bring them in, but we're getting way into the realm of unlikely here

Locks only deter honest people. There is no perfect solution. He's just trying to prevent the average Joe from going to the internet. One on my networks I thought was so secure a 17yr boy came and screwed me up. LOL I still laugh about that one.

 

[flptrnkng]

Grab one of the Linux Kiosk live CDs, remove the hard drive from the PC, boot from CD, lock down the browser with a home page that you want, and remove the address bar.

 

[deaner]

Is there anyway to restric internet access on a PC so that it only has access to one website? This is for a terminal to allow users to create their AD accounts VIA a website.

We want to restrict access on the terminal to only that website. How can we do this? This is on a linux box. Thanks.

If you want to be super elaborate - content protect device will do the trick!