internet filter and access control

[Bill Vermillion]

On Thu, Jan 27 12:26 , GCC Consulting, showing utter disregard for 
spell-checkers gave us this: 

> Dennis,
> 
> Jose's suggestion is a good one.  At one client site the router is set, by
> Verizon, to block all internet access for IP address below 192.168.100.

> I have all employee computers set with fixed IP's below 100
> except for 3 machines. And yes we do have a hardware firewall
> installed also. These firewalls can be set to do what you want
> also.

> Take a look at sonicwall, watchguard, Cisco. Better yet, here
> is CDW's list of firewalls

> http://www.cdw.com/shop/search/results.aspx?key=firewall&platform=all&x=22&y=9

> This will give you an idea of what is available and what might
> fit you needs.

Let me put in a plug for a local company [for whom I used to
transport mail back in the days of all dial-up] and that is
Global Technologies Associates - with their GNAT box line.

Not the cheapest, but Paul's company built the first NCSA certified
firewall for sale with the system being totall in SW on generic but
rugged Intel systems.  Up until then they were all hardware.

They do firewall the right way - with 3 NIC cards - or a 3-port
NIC card.  This way you have the outside IP, then you have
the Bastion Host / DMZ [demilitarized zone] and then the private
network.

This way you can put your web servers that need to be accessed from
the outside world in the DMZ.  Your local machine are on yet
another network behind the DMZ so even if someone was able to crash
into the web-server they won't be able to get to the rest of the
machines.

Bill
> > -----Original Message-----
> > From: filepro-list-bounces at lists.celestial.com 
> > [mailto:filepro-list-bounces at lists.celestial.com] On Behalf 
> > Of Dennis Malen
> > Sent: Wednesday, January 26, 2005 8:08 PM
> > To: filepro-list at lists.celestial.com
> > Subject: internet filter and access control
> > 
> > We are seeking software or hardware reasonably price that 
> > will permit users access to only company permitted  web sites.
> > 
> > All users are on thin clients. Therefore, no software may be 
> > installed on the users machine only on the server.
> > 
> > If anyone is aware of anything that may work, please let me know.
> > 
> > Dennis Malen
> > 516.479.5912 
> > 
> > 
> > _______________________________________________
> > Filepro-list mailing list
> > Filepro-list at lists.celestial.com
> > http://mailman.celestial.com/mailman/listinfo/filepro-list
> > 
> 
> 
> _______________________________________________
> Filepro-list mailing list
> Filepro-list at lists.celestial.com
> http://mailman.celestial.com/mailman/listinfo/filepro-list
> 

-- 
Bill Vermillion - bv @ wjv . com