How to Block Specific URL access

[deklin]

I currently have a content filtering solution implemented. Certain users are overriding the system to go to inappropriate sites. Is there a way i can prevent users from accessing specific urls via dns? Can i re-route URL destination addresses?

Deklin

"What goes up must come down. Ask any system administrator."

 

[FaiTHLeSS]

You could add local zones for the domains you wish to block people getitng to these sites, todo this create local forward zones for each of the domains you want to block. If you want to redirect them to another site then create a A record to point to another site.

But a question is how are these people getting aroind the content filtering in the frist place? If they are using anonymous proxy sites is it not just easier to block them?

 

[Grenage]

Going down the path of blocking sites like that is a bit messy, and time consuming. Ideally you would configure the firewall to reject web traffic that hasn't come from the filtering solution, that's what we do with our ISA2004 server. If they are bypassing the filter through other means, when the best thing to do is locate and block those means.

Also, if they are breaching your company policy - enforce it! Reprimands and official warnings are not unreasonable. Neither is sacking people for repeat offences.

Carlsberg don't run I.T departments, but if they did they'd probably be more fun.

 

[lhuegele]

I'm with Grenage on this one. Blocking the ways they are getting around your filters is the smart thing to do.

Also, if your company policy doesn't have specific wording about how bypassing filters and other protections is against company policy, you should add that wording! Then make sure everyone knows the policy - then enforce the policy.