Bit of a tough Internet blocking question

[Mr_M_Cox]

Hi All,

I need to find a way to block users accessing the internet but still allow access to the intranet.

The thing is it cant involve using Proxy settings as we have some software accessable to the users that will reset the proxy.

Also needs to be easily done to alot of PC's over the network

Any ideas are more than welcome as we are a bit stuck here.

Thanks all

[Edu-IT]

The thing is it cant involve using Proxy settings as we have some software accessable to the users that will reset the proxy.

What I would have suggested is set the proxy to something non existant and bypass the proxy for local addresses but that isn't going to work then.

What is the purpose of the software that you're talking about? Can you not get around it for these users?

[BBeh]

Could you just blacklist everything, and just whitelist the intranet?

[Mr_M_Cox]

How can I add the black/white list to all PC's across the network without having to go to each one?

An no, I cannot get rid of the software, long story but no, i cant.

[Edu-IT]

How can I add the black/white list to all PC's across the network without having to go to each one?

Do you have any web filtering software?

[f21970]

I'd just buy Browsecontrol & use that. Then you can turn internet off and on when you need (or even better, delegate that function to teachers).

[Mr_M_Cox]

Sorry, prob should have said straight away, I CANNOT buy or use any third party software. It HAS to be something found within windows XP, do able across many PC's easily and not involve the proxy. So far the best idea is content advisor but that is fine on one PC but not really scaleable across the network, that I know of!

Thanks for all the help so far.

[Edu-IT]

Sorry, prob should have said straight away, I CANNOT buy or use any third party software. It HAS to be something found within windows XP, do able across many PC's easily and not involve the proxy. So far the best idea is content advisor but that is fine on one PC but not really scaleable across the network, that I know of!

Thanks for all the help so far.

I think you're asking for the impossible.

[nephilim]

possibly the use of an ISA server redirect? if they have access to the server, put ISA on, add your website blocks, and in theory it should work!

[Mr_M_Cox]

Tell me about it, I really need to ind a solution but I am stumped. I am not allowed to add any software so that blew my third party software out of the window but the heads still want to maintain access to intranet and network so cant just remove access all together.

Any other ideas please help. :-)

Any more info on setting black/white lists on multiple PC's?

[Edu-IT]

Tell me about it, I really need to ind a solution but I am stumped. I am not allowed to add any software so that blew my third party software out of the window but the heads still want to maintain access to intranet and network so cant just remove access all together.

Any other ideas please help. :-)

Any more info on setting black/white lists on multiple PC's?

I'm intrigued. Why can't you add software to the network if it's the only way to achieve what you want to do and it'll benefit the school?

[gwildebeast]

You might be able to do something with DNS by removing any forwarders and root hints from a specifically configured DNS server and using DHCP to direct all the computers you want to not have internet access to that server as their DNS. I haven't tried this but in theory it should work.

[FN-GM]

You could add lines to the localhost file. No extra software needed at all.

Z

[Mr_M_Cox]

Because I have no money for it and they dont like free/shareware. Then If i do want to add it then I have to get it approved which takes ages.

[pete]

Block them at the border firewall? Or do they need access to the internal LEA sites?