How to give access to one site, Not the whole internet.

[Sina]

Here is the chanllenge:

Users at my work place don't have internet. We are not allowed to provide internet for them.

But on the other hand, I have to give access to one site( one page where they can search for phone numbers) on the internet, without giving them access to the entire internet.

The site out there, call it "SiteA". The users should be able to go to this site and input data to search for phone numbers and such.

How can this be achived using Linux Apache and proxy server or IP forwarding.

Is something like this possible.?
Thank you.

 

[marsd]

Should be simple to arrange with squid as your proxy and
iptables filtering egress. You could redirect
requests for any other url to an error page using squid.

But, this scenario is fairly advanced and needs to be tested as it develops.

 

[Sina]

Hello Marsd,

How can I create a custom proxy server to allow only access to selected domains on the internet only.

i.e Allow access to the following sites only:

http://www.cnn.com

http://www.yahoo.com

http://www.google.com

Using squid is that possible?
I like to have a setup that I setup the proxy setting on the client workstation and using this proxy they can only go the select sites above.

Thanks for your help.

 

[marsd]

Sure, you can restrict traffic by url with squid.
As far as how to configure squid, well, download squid
and get a good book for it.;-)
Combined with iptables redirection and egress filtering
you have a pretty good solution.

 

[Sina]

Thanks for your positive feedback.
I did download the squid and installed it on a Redhat 7.2 system.

I will read the manuals and docs to see.

Any hints on where these restrication would have to be applied (I see the access control file) but the problem is the format. Don't know where to begin to find out who to write the format of allowin only selected sites to go through.

Any hint would be greatly appreciated.

Thanks Much in Advance.

Thank you.

 

[Sina]

First of all thank you so very much for the hint.
Now one question I have. the company has a proxy server that is basically the main proxy. called globalproxy.city.gov.

I have to setup a proxy for our department that forwards requests to the main proxy (globalproxy.city.gov.).

I already installed a proxy server(call it gatekeeper) on Linux for our department and in the browser (netscape) on linux I can get out to the ineternet using the globalproxy.city.gov.

The client workstation has to use the proxy gatekeeper to access only the selected domains.

What should I do (or where to look for ) to tell the gatekeeper to allow forwarding or internet access for client who use the gatekeeper as their proxy server to simply allow internet access for only selected domains?
i.e

http://www.yahoo.ca

http://www.cnn.com

I hope I'm clear, since we do not have access to the global proxy server and it is pretty wide open, we can not request changes to the global proxy server, hence creating a custum proxy server for this purpose to allow limited domains through.

Your help is greatly appreciated.

Thanks much