Partially Blocking Connections

I have a network of Windows 98 computers interconnected
through a switch, and using TCP/IP protocol. I have no
firewall and all computers have access to the internet.

How can I block users from using the Internet Explorer
(Browsing)and limit them to email and MSN messenger
services only? I have tried placing a phoney proxy
address and uninstalling the internet explorer, but some
users have fixed that.


Viking

Replace IE with a phony program?

If the computers connected through a computer rather than a switch, I'd
tell you to make a filter. Right now, I'm not certain about what you can do.

Oh, wait, I think I have a solution. Good thing I didn't post this
immediately.
http://www.internetfilter.com/files/index.html
You might be able to filter out all websites with this, but I'm not sure
what the 'demo' includes.

Viking wrote:

> I have a network of Windows 98 computers interconnected
> through a switch, and using TCP/IP protocol. I have no
> firewall and all computers have access to the internet.
>
> How can I block users from using the Internet Explorer
> (Browsing)and limit them to email and MSN messenger
> services only? I have tried placing a phoney proxy
> address and uninstalling the internet explorer, but some
> users have fixed that.

Greetings and Salutations...

On Thu, 31 Jul 2003 07:23:29 -0700, "Viking" <(E-Mail Removed)>
wrote:

>I have a network of Windows 98 computers interconnected
>through a switch, and using TCP/IP protocol. I have no
>firewall and all computers have access to the internet.
>
> How can I block users from using the Internet Explorer
>(Browsing)and limit them to email and MSN messenger
>services only? I have tried placing a phoney proxy
>address and uninstalling the internet explorer, but some
>users have fixed that.

I had to deal with this very problem at a client's
site a month or so ago.
One bit of information that is vital is "how
are the computers connecting to the Net?" If you just
have a DSL modem plugged into the switch, it is pretty
much impossible.
However, if there is a router in there, it is
fairly painless. Basically...go into the router configuration
and redirect any acess to port 80, 443 or 8080 to an
internal webserver that has a web page saying that
web browsing access to the Net is not allowed.
That means that 99.9% of the net will be unavailable,
and if you can...block any queries to port 53 (DNS)
also. The latter might be a bad idea, as it is
possible that your internal computers are using
the service. Alternatively, of course, you can
simply redirect any queries to 127.0.0.1...which
will cause their browser to hang with NO messages.
I prefer the former to the latter, as it means
the managers get whined at, because of policy,
rather than the users calling me because their
Net does not work any more.
I also have to say that I hope you DO have
a router or something that MIGHT be doing NAT or
firewalling in between your systems and the Net. If
you don't, and, have public IP addresses on your
machines, I hope you don't mind your network being a public
bathroom, as it will leave it wide open for anyone
that wants to to come in and play.
Regards
Dave Mundt