url blocking

[steve]

I have a customer who wants there windows 2000 server
machine to only be able to access 1 web address(there web-
outlook). They do not want anyone to surf anywhere else
on the net. Can someone point me in the right direction?

 

[Steven Umbach]

You could configure their firewall to allow outbound internet access to port 80
TCP to be only that particular ip address for the website from that server's ip
address. The server could basically be configured the same way with either a
personal firewall such as Sygate or Kerio or use ipsec filtering policy on that
server to do the same as long as there is another firewall at the perimeter of
the network. The ipsec policy could be configured with a block all ip rule, a
permit all ip rule for the lan subnet, and a permit ip rule for outbound 80 TCP
to the allowable website, with all the rules mirrored .--- Steve

http://www.microsoft.com/windows2000/techinfo/planning/security/ipsecsteps.asp