On Sat, 27 Sep 2008, mark.dodge wrote:
I need to limit which web pages multiple business computers can go to. What is the file that does this? I want to limit IE to around 12 sites the business needs for insurance and their page and a couple of medical research sites. I've done a google on whitelist but it comes up with programs that can or can't be run.
Multiple methods, if you can fit all of the websites into the "Don't use a proxy for these sites" line in the internet explorer proxy settings you can setup a dummy proxy and use that line to whitelist your sites.
I wouldn't just do it at the client, I would add it as a group policy and make it so they can't change the proxy server.
Probably the best way of doing this is removing their default gateway and setting up an actual content filtering proxy server.
The Cyclope Filter I recommended previously works well, but costs per user. You can quickly and easilly add and remove sites from the whitelist and blacklist in the proxy, and it can be configured in either mode (Whitelist or Blacklist). It doesn't have individual user settings, so you'd need something a bit more powerful if you're looking for allowing different users to access different sites.
It all depends on how determined your users are to get past the filter. If you allow access out to the internet on other ports, they can always install an SSH server somewhere, use an SSH client and tunnel all their HTTP requests to a proxy server they setup elsewhere, and bypass. That's what removing their default gateway fixes.
Christopher Fisk -- Leela: Hey, you know what might be a hoot? Professor: No. Why would I know that? -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
