Want to block all websites, and only allow the ones that are needed in a corporate setting

[Cristatus]

I am looking to block access to any and all websites, except for a couple that I allow. I am using Internet Explorer 6 on all the computers, and none of the computers are attached to a domain (they're all in a workgroup). We do have a firewall, but the firewall is a very spartan system, and doesn't have any advanced capabilities.

What are the best options to do the above? I don't mind setting up something all the computers individually, but I do not have a server either to set up anything.

TIA

(C)

 

[tomict]

in my office i install PFSENSE fire wall it easy and free and stable
-can block per host or drop speed and + cache proxy
and anymor
wold you ned PFSENSE talk to me i can help you
thank

 

[RadiclDreamer]

You will need to either pay for a service or setup a server machine to do this. I recommend squidguard which runs on linux. Its free and pretty easy to use and will run on slower hardware

 

[Cristatus]

Thanks for the suggestions guys, but I realized I didn't mention that I don't want to buy extra hardware. Also, I'd rather install something on the local machine, and have every computer on a limited account.

I was thinking maybe changing the hosts file would do it? But, I want a whitelist, basically only allowing a bunch of sites that I allow. Not a blacklist. I know how to blacklist using the hosts file though.

(C)

 

[imported_snikt]

Look into locking down IE with a Local Policy via GPEDIT since the workstations are not on a domain. You can remove the address bar then prevent users from re-adding it and set Favorites, i.e. web sites that you specify.

 

[Markbnj]

If you want to run it on a local windows box look at ccproxy. It's pretty small and fast, but you'll need a license for more than a couple of clients.

Personally I'd find an old box and run squid/squidGuard on it. You can run it on just about anything.

 

[JackMDS]

http://www.netnanny.com/products/netnanny

 

[brad310]

Originally posted by: Cristatus
Thanks for the suggestions guys, but I realized I didn't mention that I don't want to buy extra hardware. Also, I'd rather install something on the local machine, and have every computer on a limited account.

I was thinking maybe changing the hosts file would do it? But, I want a whitelist, basically only allowing a bunch of sites that I allow. Not a blacklist. I know how to blacklist using the hosts file though.

(C)

You could enable the content filter and just put in what sites are allowed. Then ppl would have to have a password to go elsewhere. Thats just an IE setting on each machine, since it appears to be a smaller network. There may even be a GPO for it.