allow access only to certain web sites

[Bubba Gump]

Does anyone know of a simple solution to only allow web access to a few
specific web sites? Parental controls seems to do ok but I have to list
all sites I want to block. What I want to do is block all sites except
for the ones I tell it to allow. Am I not understanding how this can be
done with the built-in IE controls. I would also like to block any file
downloads (other than pdf files), IMs and chat with something that can't
be gotten around/disabled without a password.

Any help is appreciated.

Buster

 

[Steven L Umbach]

That is best done at a firewall like Microsoft ISA 2004/2006 but most likely
that is not an option in your case. Assuming the computer is locked down
enough to allow only IE you can configure a bogus proxy server for the user
and then tell it to bypass for the websites you specify and you would want
to be sure to use Group Policy or such to not allow users to change the
proxy settings. Look under tools/internet options/connection/lan settings to
do proxy settings.

I replied earlier that you can not naively restrict downloads to specific
file types. To restrict IM/chat you could try to use Software Restriction
Policies in XP Pro to not allow such programs to run or use a software
firewall that can only be configured by administrators that only allows
authorized programs to access the internet. PortsLock is a personal firewall
that can have different setting based on user accounts.

Steve

 

[Leythos]

That is best done at a firewall like Microsoft ISA 2004/2006 but most likely
that is not an option in your case. Assuming the computer is locked down
enough to allow only IE you can configure a bogus proxy server for the user
and then tell it to bypass for the websites you specify and you would want
to be sure to use Group Policy or such to not allow users to change the
proxy settings. Look under tools/internet options/connection/lan settings to
do proxy settings.

I replied earlier that you can not naively restrict downloads to specific
file types. To restrict IM/chat you could try to use Software Restriction
Policies in XP Pro to not allow such programs to run or use a software
firewall that can only be configured by administrators that only allows
authorized programs to access the internet. PortsLock is a personal firewall
that can have different setting based on user accounts.

The DFL-700 NAT Router from D-Link has wildcard white/black list
settings and also does blocking of content types (files) in HTTP
sessions.

SO you can add whitelist:
*.microsoft.com/*

and black list
*

and the only thing they can get to is microsoft sites.

 

[Steven L Umbach]

Glad to know that more affordable devices are able to do advanced filtering.

Steve