Selectively blocking internet access

[Doomer]

Is there a way to block the entire Internet except for 6 website? I know content adviser will allow you to selectively block / allow websites but I really don't feel like listing the entire Internet except for these 6 websites.

Thanks

 

[nweaver]

point to a crap DNS server, add a "whitelist" of hostname/IP's to the hosts file, lock the PC down so they cannot change the DNS. They might be able to hit some sites via IP though. Many proxy servers offer a "whitelist" option to list ONLY the sites allowed.

 

[grumpyboy]

why a crap server ?

 

[yinan]

I believe you can do this with ISA server.

 

[JackMDS]

http://www.weballow.com/

Works only with IE.

 

[nweaver]

Originally posted by: grumpyboy
why a crap server ?

because they won't be able to resolve names that way...by crap I mean false.

 

[ScottFern]

We use SurfControl at work for this exact purpose.

 

[Doomer]

Thanks guys. I'll be checking out both weballow and surfcontrol. Just gotta wait on the list of allowed web site. I was told it was 6 or less.

 

[Doomer]

Holy Crap !!!!!

I downloaded Weballow and it does indeed do what I want it to do.

BUT !!!!

It can very easily be circumvented simply but uninstalling it. This renders it totally useless and a freakin' joke. I can't believe they would market it this way. how stupid can people be????

Does anyone know how much Surfcontrol costs? I couldn't find a price on their website.

Thanks

 

[nweaver]

Originally posted by: Doomer
Holy Crap !!!!!

I downloaded Weballow and it does indeed do what I want it to do.

BUT !!!!

It can very easily be circumvented simply but uninstalling it. This renders it totally useless and a freakin' joke. I can't believe they would market it this way. how stupid can people be????

Does anyone know how much Surfcontrol costs? I couldn't find a price on their website.

Thanks

almost everything can be circumvented if you allow users admin access.

the DNS thing works great for non tech users. I would figure that one out and exploit it in a heartbeat.

also, a whitelist proxy using squid just needs an old box, and then you only allow your proxy outbound web access through your firewall.

 

[Doomer]

Thanks. It has to be a simple solution because there will be no one who is computer savvy to administer it. Weballow would work perfectly if it had a password protected uninstall but as it is, not having a secure uninstall renders it totally useless.

 

[JackMDS]

You have to contact a dealer to get a quote.

As a frame of refference.

SurfControl 50 computers 1YR Sub - $775.81

 

[Doomer]

Thanks Jack. Why a dealer?

 

[JackMDS]

There is no published price table, if you try few dealers you can choose the best quote.

 

[Goosemaster]

IIRC I got cybernany for someone for aroudn $30 and Surf Control had been around $40/seat/.


CN tied in with the admin account so it was pretty effective.

 

[nweaver]

Originally posted by: Doomer
Thanks. It has to be a simple solution because there will be no one who is computer savvy to administer it. Weballow would work perfectly if it had a password protected uninstall but as it is, not having a secure uninstall renders it totally useless.

did you test the uninstall from a non admin account? If this is for non tech savvy folks, and you want to protect things, non admin accounts for normal users is the FIRST thing to implement.

 

[Doomer]

Problem is they are running a couple of apps that require admin rights to run. According to the vendor, there is no way around this. They blame MS for the way security is implemented in XP.

Is there a way to remove the entry from add / remove programs?

 

[JackMDS]

Originally posted by: Doomer
Problem is they are running a couple of apps that require admin rights to run

Installing applications that void the Admin account?

What is the point in having an Admin. account if applications can not run per users.:shocked:

 

[Doomer]

Good question. I have run into several apps that will not run or will not run correctly under any account other than admin. Companies that produce apps design for one particular industry play by their own rules because they have a captive market. One example is PC Miler, a program used by trucking companies. Working with tech support, we we able to almost get it to work under a user account, after fighting a multitude of issues, we were left with an error message when the program was exited. As far as the powers to be were concerned, this meant that the app was broke when run under a user account which made it totally unacceptable. a senior tech with ALK told me confidentially that the only way these issues would be addressed was if they began to affect the bottom line. He said there wasn't a prayers chance in hell of this happening because people who run businesses were too stupid to see past a simple solution such as run it under an admin account. I agree with him because that's exactly what was decided. Even tho I tried to point out that this was a security risk. They said we'll talk about it when it causes a real world problem.

 

[Oakenfold]

Originally posted by: JackMDS

Originally posted by: Doomer
Problem is they are running a couple of apps that require admin rights to run

Installing applications that void the Admin account?

What is the point in having an Admin. account if applications can not run per users.:shocked:

That's just it. Some applications are required to drive the business, and sometimes these app's require power user/admin accounts. Selling stronger internal controls (limited user access/accounts) to management can be a difficult task.

Like Doomer has stated sometimes it takes a security vulnerability to become a security breach or compromise to get things done.

Talk about frustrating stuff. :Q