Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Restricting internet access allowing intranet access.

  • 13-11-2009 12:12pm
    #1
    dr strangelove
    Registered Users, Registered Users 2 Posts: 816 ✭✭✭


    Hi,
    I'm 'The IT Guy' at work and i'm trying to restrict internet access on a specific PC, for a specific user.

    The user needs to be able to access our intranet, but not the internet.

    My first thought was to force the PC to use a fake proxy, such as 127.0.0.1 or 0.0.0.0 in connections -> LAN Connections, but tick the 'Bypass proxy for local addresses' box, but this doesn't seem to be working.

    My next thought was use Content adviser, but the button for that is grayed out via Corporate policy.

    So i'm out of ideas, anyone else got any suggestions?


Comments

  • #2
    JimmyCrackCorn!
    Closed Accounts Posts: 752 ✭✭✭JimmyCrackCorn!


    EDIT:

    Firewall and proxy for this kind of thing.

    SQUID as a proxy is fine. Does the job well.

    As for firewall it depends on what your outbound router is.

    As for blocking a specific user as long as there isnt a business need and you extend the policy to cover everyone without a business need there shouldn't be a problem


  • #3
    samhail
    Registered Users, Registered Users 2 Posts: 2,699 ✭✭✭samhail


    if you do set browser specific settings like that, then they can just install another browser (or use a portable version that doesnt need to be installed)

    i dont suppose you have a nice big expensive gateway that can limit internet access there ?

    you could look into getting some sort of firewall installed on the machine that stops accessing the internet.

    but ...

    you will also need to consider legalities if there are any. blocking a specific pc/person and not anyone else might be picked up in the wrong way.
    I know nothing about this side but suggest you look into it.


  • #4
    cormon
    Closed Accounts Posts: 119 ✭✭cormon


    quick and easy .

    Edit the host file on the computer to point all url's to 127.0.0.1 except the intranet site that is permitted. This basically point all requested websites to a bit bucket as the DNS query will fail.

    http://www.sharkfoo.com/37/got-malware-use-a-hosts-file


Advertisement