> any websites other than a specific business-related list of
> sites from his assistant's computer, but he still wants full
> access from his own machine. The Internet access is provided
> by cable broadband, and the network is serviced by a small
> off-the-shelf router/firewall that will allow blocking of
> predetermined URLs (a site-ban list), but will not allow
> across-the-board blocking with an exception list.
http://www.squid-cache.org is the reigning champion for proxy
software these days... it should be able to handle what you
need in terms of ACLs. Have the assistant's browser point to
the proxy server explicitly, or better yet, transparently
http://www.squid-cache.org/Doc/FAQ/FAQ-17.html.
If you can't go the transparent route, configure the
router/firewall to block outbound traffic from the assistant
(but allow from the proxy server), so it can't be bypassed.
~ Daniel
________________________________________________________________
The best thing to hit the Internet in years - Juno SpeedBand!
Surf the Web up to FIVE TIMES FASTER!
Only $14.95/ month - visit www.juno.com to sign up today!
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:31:11 EDT