Announcement

Collapse
No announcement yet.

Any good solution to limit user internet access to only one website ?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Any good solution to limit user internet access to only one website ?

    hi,
    anyone know how to limit user's internet access to only one website ? but user should still able to view share folders and print.
    thanks!
    jimmy

  • #2
    Re: Any good solution to limit user internet access to only one website ?

    I hate to say this, but disable DNS and have a hosts file only, add the single site to the file, and rely on NetBIOS (WINS) for internal names

    Of course, this wouldnt stop the user using IP addresses to get to other sites.

    For a proper solution, look at a proxy server/ firewall like ISA server
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Any good solution to limit user internet access to only one website ?

      Deny all internal ipaddresses and only allow the ipaddress that you want to access the internet. This should be placed on the firewall.

      Although the first solution from Ossian (DNS) will work I wouldn't recommend it to do it.
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        Re: Any good solution to limit user internet access to only one website ?

        the very basic thing to do is to add the restricted domain to the hosts file with an invalid IP (like 127.0.0.1)
        ________
        Vaporizers Reviews
        Last edited by DYasny; 6th March 2011, 18:02.
        Real stupidity always beats Artificial Intelligence (c) Terry Pratchett

        BA (BM), RHCE, MCSE, DCSE, Linux+, Network+

        Comment


        • #5
          Re: Any good solution to limit user internet access to only one website ?

          I think you have it the wrong way round -- I thought the OP wanted to allow access to ONLY one site, not to everything EXCEPT one site
          Tom Jones
          MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
          PhD, MSc, FIAP, MIITT
          IT Trainer / Consultant
          Ossian Ltd
          Scotland

          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment


          • #6
            Re: Any good solution to limit user internet access to only one website ?

            I found IP Security and Policy Management is an solution to resolve this prolbem, but little bit complicated.

            following the instructions, and add another filter and action to allow the website you want to access.
            http://www.petri.com/block_internet_...with_ipsec.htm

            thanks for all help! better solutions are welcome!
            jimmy

            Comment


            • #7
              Re: Any good solution to limit user internet access to only one website ?

              yeah, of course.
              Using you're firewall?
              Marcel
              Technical Consultant
              Netherlands
              http://www.phetios.com
              http://blog.nessus.nl

              MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
              "No matter how secure, there is always the human factor."

              "Enjoy life today, tomorrow may never come."
              "If you're going through hell, keep going. ~Winston Churchill"

              Comment


              • #8
                Re: Any good solution to limit user internet access to only one website ?

                Originally posted by Ossian View Post
                I think you have it the wrong way round -- I thought the OP wanted to allow access to ONLY one site, not to everything EXCEPT one site
                oh yeah, you're right.

                well, I'd disable DNS forwarding on the DNS and manually ADD A records for the allowed website
                ________
                RHODE ISLAND MEDICAL MARIJUANA
                Last edited by DYasny; 6th March 2011, 18:02.
                Real stupidity always beats Artificial Intelligence (c) Terry Pratchett

                BA (BM), RHCE, MCSE, DCSE, Linux+, Network+

                Comment


                • #9
                  Re: Any good solution to limit user internet access to only one website ?

                  Call me stupid but how does you're mail server query for MX records on the internet?
                  Does he using external DNS servers?
                  Last edited by Dumber; 5th February 2008, 20:57.
                  Marcel
                  Technical Consultant
                  Netherlands
                  http://www.phetios.com
                  http://blog.nessus.nl

                  MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                  "No matter how secure, there is always the human factor."

                  "Enjoy life today, tomorrow may never come."
                  "If you're going through hell, keep going. ~Winston Churchill"

                  Comment


                  • #10
                    Re: Any good solution to limit user internet access to only one website ?

                    it uses DNS forwarders
                    ________
                    WEED
                    Last edited by DYasny; 6th March 2011, 18:03.
                    Real stupidity always beats Artificial Intelligence (c) Terry Pratchett

                    BA (BM), RHCE, MCSE, DCSE, Linux+, Network+

                    Comment

                    Working...
                    X