Announcement

Collapse
No announcement yet.

Blocking specific sites without using any software

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Blocking specific sites without using any software

    Hi,

    Iam trying to block some websites like facebook and orkut without using any software. While googling, i could see that listing those websites in the location C:\WINDOWS\system32\drivers\etc 's host file would block the sites mentioned in the hosts file but that one is not working for me. Could you please tell me some other way of blocking such sites ?

    Regards,
    Anish
    Last edited by Anishk; 4th September 2012, 13:31.

  • #2
    Re: Blocking specific sites without using any software

    If you add fictitious hostnames in the hosts file, and map those hostnames to say the loopback address (127.0.0.1), that would prevent the user from being able to resolve the correct IP for that hostname since the items listed in the hosts file are automatically stored in the DNS cache (you can check it by going to a command prompt and typing ipconfig /displaydns).

    However, if your user has proxy settings enabled in their browser, this is not going to work, because the browser is configured to to to the proxy to access websites. Its the proxy server(s) that will resolve the host name, not the client in this case.

    Additionally, this is not a good solution in any case for various reasons...

    1) its very difficult to manage
    2) users with admin privileges can work around this
    3) you can boot to another OS and work around this
    4) you can install virtual guests on a computer and work around this
    5) you can connect to a proxy server and work around this
    JM @ IT Training & Consulting
    http://www.itgeared.com

    Comment


    • #3
      Re: Blocking specific sites without using any software

      IMHO this is partially an HR issue -- users should be made aware that if they go to prohibited sites (and IT will be monitoring) they will face disciplinary action
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd
      Scotland

      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: Blocking specific sites without using any software

        Originally posted by Anishk View Post
        Hi,

        Iam trying to block some websites like facebook and orkut without using any software. While googling, i could see that listing those websites in the location C:\WINDOWS\system32\drivers\etc 's host file would block the sites mentioned in the hosts file but that one is not working for me. Could you please tell me some other way of blocking such sites ?

        Regards,
        Anish
        What isn't working for you???

        Can you please explain a bit more about your environment.

        Comment


        • #5
          Re: Blocking specific sites without using any software

          this policy apply only to IE and not other so if you accessing particular site from another browser than Internet Explorer it will open...... for more info kindly follow
          " DreaM is not what u saw in Sleep,
          DreaM is that which not let u Sleep "

          Life is Beautiful..!!!
          `.) Always
          `.(`.) Keep
          (`.). Smiling!
          `..
          Raj only raj

          Comment


          • #6
            Re: Blocking specific sites without using any software

            Originally posted by Raj_trust View Post
            this policy apply only to IE and not other so if you accessing particular site from another browser than Internet Explorer it will open...... for more info kindly follow
            Can you kindly explain exactly what you mean by this comment.

            Comment


            • #7
              Re: Blocking specific sites without using any software

              Originally posted by wullieb1 View Post
              Can you kindly explain exactly what you mean by this comment.


              yes i mean.... C:\WINDOWS\system32\drivers\etc 's host file apply only for internet explorer and not other browser ...
              " DreaM is not what u saw in Sleep,
              DreaM is that which not let u Sleep "

              Life is Beautiful..!!!
              `.) Always
              `.(`.) Keep
              (`.). Smiling!
              `..
              Raj only raj

              Comment


              • #8
                Re: Blocking specific sites without using any software

                What rubbish!
                The host file is used as part of the operating systems name resolution process, and is totally independent of the browser involved.

                I am shocked, absolutely shocked, that a "server support engineer" does not know that.
                Tom Jones
                MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                PhD, MSc, FIAP, MIITT
                IT Trainer / Consultant
                Ossian Ltd
                Scotland

                ** Remember to give credit where credit is due and leave reputation points where appropriate **

                Comment


                • #9
                  Re: Blocking specific sites without using any software

                  Originally posted by Raj_trust View Post
                  yes i mean.... C:\WINDOWS\system32\drivers\etc 's host file apply only for internet explorer and not other browser ...
                  I think you need to re-look at the name resolution process as outlined here.

                  http://technet.microsoft.com/en-us/l.../bb727005.aspx

                  This will outline what the HOSTS file is, which BTW is not limited to windows operating systems.

                  http://www.accs-net.com/hosts/what_is_hosts.html

                  As a test please add an entry to yours that states that www.google.com is equal to 127.0.0.1.

                  Save and close the file then try and ping google and see what is resolved.

                  Comment


                  • #10
                    Re: Blocking specific sites without using any software

                    I don't think there is any particular requirement to change the IP each time -- 127.0.0.1 is the only one you need (actually any address in the Class A 127.x.x.x network is a valid localhost)

                    The problem with the hostfile method is maintenance -- typically there are multiple names for the site (sitename.com, www.sitename.com etc. as well as multiple national variants. The other issue is deploying the hosts file to multiple client computers (and redeploying it every time it changes).
                    Tom Jones
                    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                    PhD, MSc, FIAP, MIITT
                    IT Trainer / Consultant
                    Ossian Ltd
                    Scotland

                    ** Remember to give credit where credit is due and leave reputation points where appropriate **

                    Comment


                    • #11
                      Re: Blocking specific sites without using any software

                      Nope - no need to change it at all. Checkout the MVPS Hosts file:

                      http://winhelp2002.mvps.org/hosts.txt
                      A recent poll suggests that 6 out of 7 dwarfs are not happy

                      Comment


                      • #12
                        Re: Blocking specific sites without using any software

                        Hi,

                        You are right sir. the configurations might not be working for our case as we are under a proxy set up.

                        Regards,
                        Anish



                        Originally posted by [JM] View Post
                        If you add fictitious hostnames in the hosts file, and map those hostnames to say the loopback address (127.0.0.1), that would prevent the user from being able to resolve the correct IP for that hostname since the items listed in the hosts file are automatically stored in the DNS cache (you can check it by going to a command prompt and typing ipconfig /displaydns).

                        However, if your user has proxy settings enabled in their browser, this is not going to work, because the browser is configured to to to the proxy to access websites. Its the proxy server(s) that will resolve the host name, not the client in this case.

                        Additionally, this is not a good solution in any case for various reasons...

                        1) its very difficult to manage
                        2) users with admin privileges can work around this
                        3) you can boot to another OS and work around this
                        4) you can install virtual guests on a computer and work around this
                        5) you can connect to a proxy server and work around this

                        Comment


                        • #13
                          Re: Blocking specific sites without using any software

                          Hi,


                          We have squid proxy configured in our network.


                          Regards,
                          Anish


                          Originally posted by wullieb1 View Post
                          What isn't working for you???

                          Can you please explain a bit more about your environment.

                          Comment


                          • #14
                            Re: Blocking specific sites without using any software

                            Hi,


                            Is there any other way restricting some site access without installing thrid party softwares?


                            Regards,
                            Anish

                            Comment


                            • #15
                              Re: Blocking specific sites without using any software

                              a) What went wrong when trying to edit the hosts file?
                              b) No
                              Tom Jones
                              MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                              PhD, MSc, FIAP, MIITT
                              IT Trainer / Consultant
                              Ossian Ltd
                              Scotland

                              ** Remember to give credit where credit is due and leave reputation points where appropriate **

                              Comment

                              Working...
                              X