internet filter and access control

[Kenneth Brody]

Bill Vermillion wrote:
[...]
> The other problem will be that you will have to set up the machines
> you don't want to access the world to use that internal DNS and
> for those that need to go elsewhere have those set up with a real
> DNS.
> 
> And then you have to keep the users from chaning the network
> settings to use an external DNS.   Since a good many people are
> computer savy then you need a very good internal policy as to what
> will happen to anyone violating the policies.

Just as many ISPs block SMTP access to anything except their own
servers, you should be able to block external DNS attempts, or
even have your router reroute them to your own DNS server.

> A combination router/firewall would be easiest.  The OP had
> asked for something " software or hardware reasonably price"
> and the problem there is that ones person's 'reasonable' is
> another's 'outrageous'.

:-)

[...]

-- 
+-------------------------+--------------------+-----------------------------+
| Kenneth J. Brody        | www.hvcomputer.com |                             |
| kenbrody/at\spamcop.net | www.fptech.com     | #include <std_disclaimer.h> |
+-------------------------+--------------------+-----------------------------+
Don't e-mail me at: <mailto:ThisIsASpamTrap at gmail.com>