Block Internet access at work

giraffe69

1. Have a written policy which all workers agree to. It may not solve the immediate problem but will help in the long run. This policy can inlcude type of use and amount of use and times of use.
2. Make sure this policy includes all devices i.e. anything you add in the future and their devices.
3. Be sensible. Banning them from using their mobile in the lunchbreak is not reasonable
4. Make sure your phone system is included. If you stop them using the internet and several switch to 118118 for directory enquiries it is not hard to build up a significant telephone bill.

gnus

Go into hosts file

#allowed sites
74.125.227.114 google.com (or whereever the email accounts are based)

#blocked sites
127.0.0.1 .com
127.0.0.1 .net
127.0.0.1 .org
127.0.0.1 .edu
127.0.0.1 .co.uk

etc etc

However I don't know if the web email is on a static IP.

Enterprise_1701C

How much do they NEED to use the laptop. I am guessing aa you only have one that it is not much. So surely, if it is a laptop, could you not just keep it with you or in they care of a trusted employee, meaning that they simply have to go to the laptop for whatever they NEED?

googler

paddypaws101 wrote: »

This sounds like an interesting option, how exactly would we do this? ( sorry, not very techie! )

This was referring to using the router's firewall to only access one site - the e-mail site - and the procedure will vary from router to router. Either consult the user manual that came with it or google the "make model + user manual" to see if there's an online version, or check the maker's website for one.

You need to change the contract of employment with your employees to include a defined policy on internet access.

If the laptop is connecting wirelessly, is your wireless network secured by a network access key? This is usually printed on the back of the router, but can be changed once you've accessed the router's control panel - see the manual again. If you change this to something that only you know (and make sure you don't lose it), then employees won't be able to logon to the router with wireless devices they bring to work.

arrallas

OpenDNS is a great solution and allows you to block specific sites or types of sites via your router. The home version is free, but there are different paid packages.As has been said though, it would be better to get an acceptable use policy in place that the staff can understand and get behind, rather than just a "turning off of the tap"

Plushchris

Get a policy in place and dont be scared to act on it, I used to train in callcentres and have been to some places where the computers are locked down so tight the staff couldnt even use the calculator on them.

Also if you start blocking using your connection (via router or whatever) keep an eye out for people plugging a dongle in to the laptop or using their mobiles as a portable hotspot (tethering) as thats quite common in places that have laptops with built in wireless cards.

The phone trick is something I've used myself..

im-lost

flashg67 wrote: »

I work for a large corporate. so a lot of sites are blocked by admin eg Facebook etc, but we do have access to a PC with full internet for break times etc. A basic pc/monitor can be had very cheaply.

Perhaps, rather than be seen as a miserable old so & so, you could allow access at certain times only? The internet is such a big part of everyones lives, sometimes a little give & take is needed? And for the staff who can't respect this, get a policy asap and start applying it?

What a stupid statement, they are at work, there's a time to post on
facebook and watch amazed cat, and its not when your employer is
paying you, seriously what is wrong with people that they cant possibly
get by for a few hours without looking at some pointless crap online.

But yes, you are right, a bit of give and take is needed, the OP gives
these people a job, they take the money and do as they are bloody
well told for a few hours..

bluesnake

2 easy ways

with a rule based firewall allow friendly company.com through and ban the rest by just disabling port 80 port 443.

with a pac file, misconfigure the proxy http://www.proxypacfiles.com/proxypac/index.php?option=com_content&view=article&id=48&Itemid=80
and http://sysadminhell.blogspot.co.uk/2009/03/proxy-pac-files-how-to-use-with-laptops.html

mttylad

1 laptop?

Move it into the bosses office or right in front of view of it.
Issue the policy.

That should sort it out.

Gazza1964

I think K9 might be a good solution......

Block web sites in more than 70 categories, including pornography, gambling, drugs, violence/hate/racism, malware/spyware, phishing

Force SafeSearch on all major search engines

Set time restrictions to block web access during designated times

Configure custom lists for "always allow" and "always block"

Override a web page block with password

Trust the enhanced anti-tampering, even children can't break

View easy reports to monitor and control web activity

Real-time categorization of new adult and malicious sites

Best free parental controls software/internet filter available

Compatible with Windows or Mac machines

It can be configured very easily to do exactly what you want.