Web Access Blocking Software

[crs4]

Hello all,

Always a wealth of expertise on here, so I'm gonna tap into that a bit. I am doing work for a client that needs some blocking done for web-access. Not content filtering or A/V, just blocking. I realize that I probably won't find a block-only product, but I have to ask. All I really need is a cheap solution for simple blocking. I've thought of simply enforcing policies in 2000(Windows 2000 Server/Client network) to turn off proxy settings and make it loopback to prevent access. But I also would like to have something more assured, but that doesn't cost $1000+.
Any ideas or suggestions would be greatly appreciated, thanks in advance.

Charlie S.
IT Technician

 

[smah]

Many broadband routers can do this either by IP address or Mac address, if you're using a broadband connection.

 

[pansophic]

crs4,

Are you trying to block all web access, or just to certain domains? Blocking all web access is as simple as creating an ACL in the router that blocks all outbound port 80 and 443 requests.

Otherwise you probably have to go to a firewall solution. But if you can afford an extra machine, you could do a Linux firewall for cheap or free (in terms of software), and use a transparent Squid proxy that allows you to block access to specific domains.
pansophic

 

[Fjack]

If it's the ports you want to block, try an EtherFast® Cable/DSL Router with 4-Port Switch BEFSR41 (about $60)

You can allow certain IP’s web access, block ports, forward, etc. Make sure you download the updated firmware.

Remember, if the user is creative and security is weak, they can always use a port redirector like fport from

http://www.foundstone.com/knowledge/assessment.html

Hope that helps.

 

[browolf]

on MS proxy 2 and probably ISA server as well u can restrict access by user/group.

i think you can do deny everyone access except....

as well. ===============
Security Forums

http://www.security-forums.com

 

[crs4]

Thanks a bunch. That gives me a start...already considered doing the GPO/bogus proxy thing, just not fully sure what limits I have as far as how restricted they need to be and how much they want to spend. This client is extremely unorganized so God knows when I'll get an answer. Oh well.

Thanks for the info and taking the time to help.

Charlie S.