Restrict Internet Access

[fandabbydosey]

Hello,

I have windows server 2003 network with XP clients.
The clients connect to the internet through the default gateway. The default gateway is a server which controls the satellite broadband connection.

How can I stop some users from accessing the internet but allowing access to the intranet.

The only method I know of is to set the users group policy to point to an incorrect proxy address. But if I do this they cannot access our internal intranet website.

Is there anything else I can do?

Thanks
Fandab

 

[aftertaf]

what in your case is the difference between the default gateway and your proxy server?

what is your network config (DMZ, firewalls etc..) Where is your intranet server positioned in regard to this?

and what software do you have as a proxy server?

Aftertaf

"Resolve is never stronger than the night before it was never weaker

 

[fandabbydosey]

the default gateway os the proxy server.
The ISP tells me it is a transparent proxy server. (Stealth)

The gateway is physically located on the same network as all the clients. And also on the the same subnet.

I dont know anything about the proxy server it is managed by the isp. They wont disclose any info about except that it is transaprent.

All I do it set the default gateway IP address on the clients and they have internet access.

 

[aftertaf]

so, you have an internal network... and it has a proxy that is managed by your ISP? Where is this server, physically?

in your building or at ISP?

if so, how is it plugged in to your network?
and i gather your intranet server is also managed by the ISP?

Aftertaf

"Resolve is never stronger than the night before it was never weaker

 

[fandabbydosey]

Sorry,

The proxy server(gateway) is connected to my LAN here. Ethernet.

The Intranet server is also located on my LAN on another server which IIS installed. I have set the intranet website as the homepage for all clients using group policy.

To access the intranet the users either click home or type in the IP address of the server in the URL bar.

If I point the clients to an incorrect proxy address they cannot access the intranet site, because IE wants to use the proxy server to access the intranet site.

Its a tricky one.

 

[aftertaf]

nooooooo!

there is a tickbox
do not use proxy for local addresses..
and you can specify extra sites in there as well

Aftertaf

"Resolve is never stronger than the night before it was never weaker

 

[aftertaf]

also applicable via GPO

Aftertaf

"Resolve is never stronger than the night before it was never weaker

 

[fandabbydosey]

bloddy hell yes, I remember now.
Me being dumb

cheers

 

[jonbush]

what software are you using on the gateway ???

most decent software packages can control access....

the alternative is put your intranet on a seperate server and configure your DNS to point to the new server, so there is no need to use your bandwidth until you need to, or change your setup completely and build a new gateway server, on the same ip, but get DNS resolved internally...

hope this helps

J.

=======================================
I know i've got it backed up somewhere!
=======================================

 

[fandabbydosey]

Hi Thanks,

Got it sorted now.