Re: Disable Internet surfing

From: Mike (mjl000@hotmail.com)
Date: 02/04/03 

From: "Mike" <mjl000@hotmail.com>
Date: Tue, 04 Feb 2003 04:53:26 GMT

Iit sounds like you probably don't have a server, just a workgroup. Without
group policies, you really can't prevent 9x clients from doing many things.
Creating duplicate individual Local Policies is just looney. If your corp
has local servers, it should be possible to setup Group Policies which can
limit many things, maybe even programs by name (iexplore.exe) - on 2000/XP
this is possible, but not sure about 9x.

Even if the management doesn't want to spend dollars, perhaps there is a PC
that can be spared. Either setup a spare PC (with 2 NIC's) as a
firewall/router or setup a workstation with 2 NIC's as an ICS host (the
poorest solution, but workable).

By using NT4/2000/XP it's possible to filter the ports on a NIC. The
filters only function for incoming packets on a NIC, so on your LAN side you
can set the filters to only allow the ports for POP/SMTP, Norton AV updates,
network news, or any other protocol you desire while eliminating port 80 or
just allow all ports and only block port 80. Remember, the client PC sends
a request from an ephemeral port number which is randomly selected, but
sends the request to port 80, so traffic to the ICS host will be to port 80
and the ICS host should block it if set as a blocking filter.

There are significant disadvantages to not setting up the correct type of
equipment to provide an appropriate solution. One of the great limitations
with ICS is its stripped down DNS (and DHCP) which doesn't properly handle
NSLOOKUP's. The other is it's a PC, which means that it must be on and
functional (in the network with appropriate settings) to provide service.

Last, honestly inform the management that without some additional software
or equipment it's not really possible to setup a good working solution that
will result in low maintenance costs. Some type of firewall/proxy/router is
the easiest way to do something like this and not a high cost for a small
company. Consider something from Linksys.

"Roby" <zzysh@nospamplease.biz> wrote in message
news:00f501c2cbc2$403b3070$d7f82ecf@TK2MSFTNGXA14...
>
> >-----Original Message-----
> >If you are on a company network, I would set up a proxy
> server or firewall
> >that allows you to manage group acccess. This will be
> the easiest solution
> >to manage.
> >
> >MA
>
> Thank you, Michael. However I forgot to say that the
> executives don't want to spend money neither in firewall
> devices nor proxies. I just wanted a simple solution for a
> few clients, I thought of Local Policies for W2K clients
> but that cannot be done on Windows 98 systems.
> What do you think?
>
>
>

Relevant Pages

  • RE: Printing from Win9x clients stops
    ... > and make sure this software does not interfere with SBS Server. ... > clients, please disable it and try again. ... Create a local printer and redirect the port to the network server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Apache webserver outage - need help with forensics
    ... Bob Brennan wrote: ... > I have a server which went completely unresponsive today on port 80 ... How many clients is your server configured to handle simultaneously? ... clients communications stuck and no new client connections could be accepted. ...
    (Fedora)
  • RE: Web Services or Sockets?
    ... different companies with addresses from a DHCP server. ... it listen to a port on the client computer? ... I don't know how these two examples with clients over the internet. ... >> If the client is listening to a port, but is sitting behind a firewall, how ...
    (microsoft.public.dotnet.distributed_apps)
  • Re: Barcode Scanner on Client Com port
    ... I cannot find a Com port setting on my CE .NET device although it has one ... >>Win32 application very happily on a Windows 2003 Server. ... >> the Clients. ... >> physically attached to Com1 on the server. ...
    (microsoft.public.windows.terminal_services)
  • Server not applying group policy?
    ... I have a Windows 2000 Advanced Server environment; I am running AD and have group policies implemented for our clients. ... All users have roaming profiles and because of Group Policies, have a limited desktop where they only see 3 icons. ...
    (microsoft.public.win2000.active_directory)