| View previous topic :: View next topic |
 |
Author |
|
| Message |  |
|
admin
Site Admin
Joined: 01 Jan 1970
Posts: 269
|
 Posted: Wed Apr 05, 2006 3:44 am Post subject: poor mans access restrictions |
 |
If your looking for a cheap and easy way to do this you could always configure your DNS to only resolve a few specific websites. If you want something a little cleaner try running squid. Go to sourceforge.net and look it up. You might also look up ipcop. It is a whole linux distribution that is a firewall and it includes squid. Manually setting up squid on your own could be a real headache. Ipcop is fairly easy though. You can also use routing and remote access service on Windows 2000 server to only route specifically. |
|
| Back to top |
|
 |
admin
Site Admin
Joined: 01 Jan 1970
Posts: 269
|
| Posted: Thu Apr 06, 2006 9:28 am Post subject: create a zone called . |
|
Create a zone called . By creating the . zone the dns server will think that it is the dns server for all domains. Then you can create the domains that you want your users to have access to. You will have to manually create each record like www etc. You might want to load DNS on another server and set your "bad" users to point to that dns server. This way your email server and admin users can use the regular DNS. That is up to you though. Do you know how to create a zone on the dns server? I will walk you through that if you don't. |
|
| Back to top |
|
|
admin
Site Admin
Joined: 01 Jan 1970
Posts: 269
|
| Posted: Fri Apr 07, 2006 9:31 am Post subject: Ipcop or Squid |
|
Stopping DNS is usually enough. How many users actually know what an IP is let alone which one goes to what site. If you do need a more secure solution you could get it at www.ipcop.org. It's the firewall I mentioned earlier. You could also use RAS. The overview is you would NOT have a gateway configured on your internet adapter and instead create static routes to the netwoeks the specific sites you want. |
|
| Back to top |
|
|
|
