Windows 2000 Server Restrictions

[Minty]

Hello

I am wanting to stop Network users from getting onto the Internet, I have a couple of sites which should be allowed through but the rest is a no no.

Is this possible?

Cheers

Dan

[Structural Integrity]

Not with the standard Win2k kit (I think... I can't find anything in my book), though there is a Microsoft Proxy that can probably do that. Otherwise a 3rd party Proxy can do the trick.

Or...
You can fiddle around with the Router or DNS service a bit. For example you add an entry to the Router (a static route) that will redirect EVERYTHING to 0.0.0.0, except the sites you want your users to visit. Ofcourse, this is a rather unpretty solution.
I'd go for a proxy.

[Vaio]

1: Get an oldish piece of crap PC
2: Install any decent Linux distro (Mandrake, SuSe, RedHat etc)
3: Install and configure Squid (it's nice and easy)
4: Setup the users PC's to use the Squid box as a proxy
5: Block the bad sites using SquidGuard
6: Laugh at the plebs who can't download their pr0n anymore

It worked for me

Vaio

[Vaio]

Or if you really have to use Windows

Get Kerio Winroute Pro

and use that instead of Squid and SquidGuard

Vaio

[Minty]

Originally posted by Vaio
Or if you really have to use Windows

Get Kerio Winroute Pro

and use that instead of Squid and SquidGuard

Vaio

I can use that on my current server with 2000 Server right?

[Vaio]

Yup, you wont have a problem with it

BTW

Don't use the registration crack available from all those naughty cracks sites as this will deprive a poor starving programmer of a new Porsche

Vaio

[Minty]

Originally posted by Vaio
Yup, you wont have a problem with it

BTW

Don't use the registration crack available from all those naughty cracks sites as this will deprive a poor starving programmer of a new Porsche

Vaio

I won't

I'll buy him the god damn Porsche

[Vaio]

Programmers that invent software that works first time with no bugs deserve Porsches

So why do so many at Microsoft have them ? They all can't have invented Freecell

Vaio

[Minty]

Originally posted by Vaio
Programmers that invent software that works first time with no bugs deserve Porsches

So why do so many at Microsoft have them ? They all can't have invented Freecell

Vaio

Or Minesweeper, which wasn't even a MS game originally.

I won't crack it, especially as it is for business purposes.

[queball]

Originally posted by Structural Integrity
Not with the standard Win2k kit (I think... I can't find anything in my book), though there is a Microsoft Proxy that can probably do that. Otherwise a 3rd party Proxy can do the trick.

Or...
You can fiddle around with the Router or DNS service a bit. For example you add an entry to the Router (a static route) that will redirect EVERYTHING to 0.0.0.0, except the sites you want your users to visit. Ofcourse, this is a rather unpretty solution.
I'd go for a proxy.

Microsoft Proxy is now ISA Server

There's a Squid for Win2K around somewhere if you don't mind editting a textfile.

[Raging.Retard]

If your feeling ambitious (and your permissions are suitable harsh to prevent the user overriding them) its perfectly feasible for you to write a set of PICSRules to be imported by your browser (Well IE at least.. I dont have other browsers to know if they support them).

PICSRules are a set of rules that determine which sites a user can view, and can be imported using the Advanced tab of the Content Advisor accessed via the Internet Settings option in control panel or Internet Options from IE's tools menu.

Details on the rule specfication can be found at http://www.w3.org/TR/REC-PICSRules-971229.html.

This obviously only restricts web browsing, from your initial description I was unable to guage the scope you required.

[Vaio]

Too much like hard work

Vaio

[Minty]

Originally posted by Vaio
Too much like hard work

Vaio

Lazy

But I guess you're right.

Its not the fact that its too much work, its I ahve no idea what its on about. But thats me (noob)

I'll look into it further