blocking websites 1

[jimbuddy]

i have a pix515 and would like to block several websites if someone could assist me.

what statement do i need to block
(facebook.com) (myspace.com)

thanks

jim

 

[Alterac]

Best to block them with your DNS server.

or if you are running 7.2 pix, (I think) you can do standard blocking of sites and IM's and such. Using appfw policy-name stuff.


----------------------------------
Bill

 

[sdibias]

The best way to control this is through a proxy or content filter like WebSense or SurfControl.

A few years a go we controlled website access using the poor mans method through the local machines HOSTS file. If you have a big environment you would never want to do this, however it works well in small environments.

Basically we just edited the HOSTS file in

%systemdrive%/windows/system32/drivers/etc

All you would have to do is add the sites in like this:

127.0.0.1 localhost
127.0.0.1

http://www.facebook.com

127.0.0.1 facebook.com
127.0.0.1

http://www.myspace.com

127.0.0.1 myspace.com

This will redirect web browser traffic to the loopback address on the users local machines. Alternatively you could have it access a custom page on your internal network telling them why they were denied access.

To make life easier you could deliver the HOSTS file via a startup script, just have the main list hosted on a server shar and then have it copy over in the startup script.

As stated before a proxy or content filter is the way to go here.




Visit www.netwerkin.com
MCSE MCSA MCTS MCITP MCP CCNA CCA A+ N+