block all websites except for one

[OxideNOS]

Can I block access to ALL websites EXCEPT for one(let's say google.com) using host files? other alternatives are also appreciated. thank you.

[greenwizard88]

I would think it would be something like

http://www.google.com -> google.com

and then *.*.*.* -> localhost

[Pupik]

  greenwizard88 said:

I would think it would be something like

http://www.google.com -> google.com

and then *.*.*.* -> localhost

Wouldn't be google.com effected by the second rule too?

[RoomKid]

  Pupik said:

Wouldn't be google.com effected by the second rule too?

no. it wont

[OxideNOS]

  Manmohanjit Singh said:

no. it wont

is there a way to set this up using group policy editor?

[Rohdekill]

I'm still trying to figure out why someone or some company would pay the large fee for internet access, yet restrict it to a single site.

[OxideNOS]

  Rohdekill said:

I'm still trying to figure out why someone or some company would pay the large fee for internet access, yet restrict it to a single site.

this is intended for only few computers

[bloodrain]

I know my router has an option to block all sites except for the "safe-listed" sites. It also has the black-list feature where certain sites get denied.

[JoeyF]

  OxideNOS said:

is there a way to set this up using group policy editor?

Usually the easiest way (provided the hosts file works) would be to to created a startup script that will copy the hosts file.

Another way would be to use a proxy server or content filter that will block access to sites other than the ones you whitelist, than you can either assign certain computers (via GPO) to use this server, or with more advanced systems, you can apply different rules to different computers or AD user accounts.

We actually do that where I work - we have a filter called "DeepNines", you can created different "filter sets" (lists of blocked/approved sites), and assign based on a number of credentials (computer IPs, AD account names, etc).

It's a very nice system, but somewhat pricey. It also is extremely effective at blocking proxy sites trying to get around the filter rules. It is worth noting that we are an educational orginization, and the filters they sell for commercial organizations are extremely different than the educational ones, idk if it's for the better or worse.

  Rohdekill said:

I'm still trying to figure out why someone or some company would pay the large fee for internet access, yet restrict it to a single site.

I can think of many reasons:

- Kiosks, where users only need to access one site

- Departments where certain users goof off way too much, and only need one site

- Testing/development purposes

- Company secrecy

[Rohdekill]

Windows SteadyState is supposed to restrict web access via a whitelist (only allowable sites). It's free.

[xdot.tk]

A firewall will do it pretty easy. I recommend the old, small Kerio Personal Firewall 2.1.5. Make sure to password protect the administration of it.

[Lilrich]

You could use opendns and then set up a rule?

[Lee G. Veteran]

  Lilrichie said:

You could use opendns and then set up a rule?

Yeah, I was thinking this too.

Why block all sites apart from Google though? Doesn't that defeat the point of what Google is for?

[sw1tch..]

OpenDNS is great. I have implemented it many times for clients. Its free and can be customized with your own company logos etc.

Another option is something like a squid proxy however this is a little more involved to configure.

[Lilrich]

Still not sure why you would block EVERYTHING bar google as previously said isnt that the whole point of google?

[asim0]

I'm pretty sure he was using google as an example...

[RatherLargeBear]

  lcg said:

Yeah, I was thinking this too.

Why block all sites apart from Google though? Doesn't that defeat the point of what Google is for?

Google was used as an example.

I don't think the OP actually wants to block everything but Google.

[OxideNOS]

  asim0 said:

I'm pretty sure he was using google as an example...

yes, google was used as an example. Bad example, i know.

  Lilrichie said:

You could use opendns and then set up a rule?

how would I set up that particular rule in openDNS. It has two options: always block and never block. does it accept wildcards?