Lockdown browsers

By d.mike ·
Is there any way (short of third party software) to limit a "public" browser to one or two unique IPs?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Are you talking about

by ComputerCookie In reply to Lockdown browsers

stopping internet access to all but two webpages or what?

Is this computer stand alone, on a workgroup or a domain?

Collapse -

Lockdown browsers

by d.mike In reply to Are you talking about

This will be a stand alone machine. I want to stop all internet access to all webpages other than our home page.

Thanks for the quick reply.

Collapse -

This may work for you

by Jacky Howe In reply to Lockdown browsers

The HOSTS File and a Simple Web Server
An Internet workstation looks up a Web address using the the Domain Name Service (DNS). DNS translates alphanumeric domain names to a numerical Internet Protocol (IP) addresses. The workstation then uses the numerical IP number to contact the Web site. Internet "old timers" will remember having to manually edit the Telnet application's file in order to associate IP addresses with more customer friendly names.

When the TCP/IP protocol was finally integrated into Windows 95, the file was renamed HOSTS. It still contains mappings of IP addresses to host names, but it is largely overlooked and seldom used because of the DNS service. However, before the workstation goes to the DNS service it still takes a peek at the HOSTS file to see if any IP numeric address are contained there. If so, it does not refer to the DNS service but instead uses the HOSTS entry. The HOSTS file was used to limit assess to specific Web sites.

To fool the browser, and the customer, the domain names of the Web-based services we wished to restrict access to were associated in the HOSTS file to a single IP address. This IP address belongs to a local Web server which delivers a single web page which informs the user that access to the site has been denied. This Web page contains a short explanation as to why they got redirected from the site they wanted as well as a gentle reminder that the library has a computer lab for such activities. The patron is then automatically sent back to the library's main Web page. (Please do not send your users to our example site)

In Windows 95/98, the HOSTS file is found in the root /Windows directory with the file extension .SAM (for sample). In Windows NT4/2000/ME/XP, the HOSTS file it is found in the directory /winnt/system32/drivers/etc and usually does not have a file extension. Make sure to remove the .SAM file extension so the file name is simply HOSTS. (NOTE: Windows often hides the extensions for known file types.)

One common problem in implementing this solution is that instead of saving the file as HOSTS, Windows adds the file extension .sam or a .txt. To insure there is no file extension, switch the Windows Explorer default to show all file extensions. The inadvertent addition of a file extension is the only reason the workstation may choose not to recognize the HOSTS file

Collapse -

Lockdown browsers

by d.mike In reply to This may work for you

Thanks for the reply. I really appreciate the reminder about the file extension!

Collapse -

Cheap internet lock downs

by PeterBoyles In reply to Lockdown browsers

Use GPOs to restrict the system access. Or hack the registry entries if not XP Pro.

You can then:

A Use a ratings file that either is blank and put the web sites in the trusted zone or add the web sites to the ratings file.

B. Remove the DNS server and put those sites you want them to reach in the local HOST file.

Each has their own short comings so you may want to create a local home page that explains things.

Related Discussions

Related Forums