Blocking this type of website???

Discussion in 'Networks' started by garefield, Jan 20, 2011.

  1. garefield

    garefield New Member

    6
    0
    1
    Hello All,

    I need your help to block a website like this one
    www.mywebsite.com/blocked

    while this one must be accessible
    www.mywebsite.com/unblocked


    Please help me to do this on a large network.
     
  2. greenbrucelee
    Highly Decorated Member Award

    greenbrucelee Zettabyte Poster

    14,292
    265
    329
    Are you saying one website is called unblocked and the other is called blocked but the rest of the name is the same?

    or are you saying you need to use this website sometimes and not others? if its the latter then just manually allow it and deny it as you see fit.
     
    Certifications: A+, N+, MCDST, Security+, 70-270
    WIP: 70-620 or 70-680?
  3. Shinigami

    Shinigami Megabyte Poster

    896
    40
    84
    Questions like this sometimes make me scratch my head (especially when they come from people with no previous posts, asking the question on a certification forum when surely there are better sites out there for asking questions on controlling internet access as seems to be the case here).

    First of all, we don't have enough information. Has this person/company deployed a proxy (like a BlueCoat), or are they trying to do so via software installed on each individual computer.

    Secondly, he mentions that he needs the site blocked for a large network, but any "large" network would surely delegate the task to someone who had a general idea of how managing web access works.

    Finally, it doesn't seem that the person wants to block a single topleve domain/website name, but rather a (possible list of) single directory(ies) on a website, while other directories remain accessible, which brings me back to my second point.

    Surely a company would not delegate tasks of this magnitude to someone who doesn't know what they're doing, which in turn brings me to my first point where the person may quite simply be stumped (it happens), but doesn't provide nearly enough information to help us help them.

    More information is needed please.
     
    Certifications: MCSE, MCITP, MCDST, MOS, CIW, Comptia
    WIP: Win7/Lync2010/MCM
  4. JonnyMX

    JonnyMX Petabyte Poster

    5,257
    220
    236
    openDNS?
     
    Certifications: MCT, MCTS, i-Net+, CIW CI, Prince2, MSP, MCSD
  5. garefield

    garefield New Member

    6
    0
    1
    Respected forum member thanks for your replies.

    @Shinigami:
    I am a noob and just wanted to know how this can be done.


    Lilttle more explanation.

    I want to know how is it possible to block a website which has a address like this one
    www.a-particular-website.com/directorynametobeblocked

    But websites like this should be accessible
    www.a-particular-website.com/anyotherdirectory
    also
    www.any-other-domain.com



    example: i want this site to be blocked www.google.com/transliterate
    but any other website including www.google.com and www.google.com/anything
    should be accessible.


    Thanks a lot
     
  6. JonnyMX

    JonnyMX Petabyte Poster

    5,257
    220
    236
    Certifications: MCT, MCTS, i-Net+, CIW CI, Prince2, MSP, MCSD
  7. garefield

    garefield New Member

    6
    0
    1
    Thanks for your reply but Sorry i can't use OpenDNS.
    Can you please suggest me any other possible solution.
     
  8. Shinigami

    Shinigami Megabyte Poster

    896
    40
    84
    How big is your network and is it for your home or for a company that you work for?

    Do you already have a proxy in place, and if so, which one is it (as the procedure varies greatly between devices/software)?

    Do you have a budget to implement a new device to control web access (this could be a new server or a hardware device from a vendor)?

    Otherwise, there's products which can snap-in with web browsers to limit access to a website, some may be free, others may cost money. But not that easy to implement for a very large network environment (unless you have centralized management in place).

    There's quite a lot of options really, but in your situation you need something that won't block the entire Domain but just subsections of it. I did a lot of this with BlueCoat's a few years back (but they're not always the easiest devices to use and configure, nor the cheapest).
     
    Certifications: MCSE, MCITP, MCDST, MOS, CIW, Comptia
    WIP: Win7/Lync2010/MCM
  9. JonnyMX

    JonnyMX Petabyte Poster

    5,257
    220
    236
    Why not?
    Do you mean you can't use it, or you're not allowed to use it?
     
    Certifications: MCT, MCTS, i-Net+, CIW CI, Prince2, MSP, MCSD
  10. garefield

    garefield New Member

    6
    0
    1
    Its a small scale company.

    We have squid proxy server linux OS.

    If this is possible through software tweaking then it'd be great, else we can buy required hardware.

    So what am i supposed to do now?
     
  11. garefield

    garefield New Member

    6
    0
    1
    Not allowed to use it.
     
  12. greenbrucelee
    Highly Decorated Member Award

    greenbrucelee Zettabyte Poster

    14,292
    265
    329
    can you not just put rules in your firewall so it can be blocked?
     
    Certifications: A+, N+, MCDST, Security+, 70-270
    WIP: 70-620 or 70-680?
  13. garefield

    garefield New Member

    6
    0
    1
    Can you explain how can i make a rule like that. For the above situation
     
  14. Shinigami

    Shinigami Megabyte Poster

    896
    40
    84
    Certifications: MCSE, MCITP, MCDST, MOS, CIW, Comptia
    WIP: Win7/Lync2010/MCM
  15. zebulebu

    zebulebu Terabyte Poster

    3,748
    330
    187
    I could figure this out in Squid - but I'm not particularly fond of doing people's homework for them.
     
    Certifications: A few
    WIP: None - f*** 'em
  16. greenbrucelee
    Highly Decorated Member Award

    greenbrucelee Zettabyte Poster

    14,292
    265
    329
    I was begginning to think this might be someones classwork since he should be able to create some rules in software firewall aswell as a hardware firewall to deny and allow the sites he wants because if he did this for a living he should really know how to do it.
     
    Certifications: A+, N+, MCDST, Security+, 70-270
    WIP: 70-620 or 70-680?
  17. JonnyMX

    JonnyMX Petabyte Poster

    5,257
    220
    236
    And it would be a good reason to tell them not to use OpenDNS...
     
    Certifications: MCT, MCTS, i-Net+, CIW CI, Prince2, MSP, MCSD
  18. ThomasMc

    ThomasMc Gigabyte Poster

    1,507
    49
    111
    LOL! Just rip Squid out and use OpenDNS or RTFM 101
     
    Certifications: MCDST|FtOCC
    WIP: MCSA(70-270|70-290|70-291)
  19. greenbrucelee
    Highly Decorated Member Award

    greenbrucelee Zettabyte Poster

    14,292
    265
    329
    just set the firewall to say sod off if anyone tries to access that site then put in a reporting script so you know whos terminal tried to access the site then you can kill them and put them under the patio :D
     
    Certifications: A+, N+, MCDST, Security+, 70-270
    WIP: 70-620 or 70-680?
  20. GSteer

    GSteer Megabyte Poster

    627
    31
    109
    Cruel but effective GBL :)
     
    Certifications: BSc. (Comp. Sci.), MBCS, MCP [70-290], Specialist [74-324], Security+, Network+, A+, Tea Lord: Beverage Brewmaster | Courses: LFS101x Introduction to Linux (edX)
    WIP: CCNA Routing & Switching

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.