Blocking domain via DNS...

Well I'm on a small 200 user network. Some higher ups wanted to block
ebay.com etc. So I stopped the record from being updated via DNS.
(Maybe not the best way.) However is there anyway I can have the
domain resolved locally on one machine???

External DNS server work or am I out of luck?

Deploy a proxy server like ISA server that can control this type of stuff
via the Users Account.


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------


<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> Well I'm on a small 200 user network. Some higher ups wanted to block
> ebay.com etc. So I stopped the record from being updated via DNS.
> (Maybe not the best way.) However is there anyway I can have the
> domain resolved locally on one machine???
>
> External DNS server work or am I out of luck?
>

My experience with proxy servers is limited. But my experience has
been 1000 user environment..once implemented it actually performed
poorly. In addition asking a user for an additional proxy password
was difficult and produced excessive calls to our helpdesk.

I believe we could block it via firewall...I'm actually not sure why we
didn't do it this way in the first place.
Phillip Windell wrote:
> Deploy a proxy server like ISA server that can control this type of stuff
> via the Users Account.
>
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Troubleshooting Client Authentication on Access Rules in ISA Server 2004
> http://download.microsoft.com/downlo...7/ts_rules.doc
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Deployment Guidelines for ISA Server 2004 Enterprise Edition
> http://www.microsoft.com/technet/pro...isaserver.mspx
> -----------------------------------------------------
>
>
> <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) ups.com...
> > Well I'm on a small 200 user network. Some higher ups wanted to block
> > ebay.com etc. So I stopped the record from being updated via DNS.
> > (Maybe not the best way.) However is there anyway I can have the
> > domain resolved locally on one machine???
> >
> > External DNS server work or am I out of luck?
> >

"(E-Mail Removed)" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> My experience with proxy servers is limited. But my experience has
> been 1000 user environment..once implemented it actually performed
> poorly. In addition asking a user for an additional proxy password
> was difficult and produced excessive calls to our helpdesk.

ISA Server uses Intergrated Authentication. There is no "prompt". It goes
by what they logged into their workstation as.

> I believe we could block it via firewall...I'm actually not sure why we
> didn't do it this way in the first place.

ISA is a "firewall". "Firewall" is a generic term. Both a Proxy Server or
a NAT Server can be a "firewall". They are just two competing technologies
to accomplish the same task. What most people call "firewalls" as simply
NAT Servers and are not as capable as a product such as ISA Server. NAT
Devices cannot use Integrated Authentication with Domain Level Accounts.
Even MS's own NAT Server (Windows Server with RRAS) cannot do Intergrated
Authentication,...I believe it is a limitation of NAT.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com