Restricting Websites

adese

macrumors member
Original poster
Feb 21, 2006
61
0
Sunderland, MA
So I edited the /etc/hosts file to deny a user access to certain non-work-related sites (myspace, craigslist, etc) by rerouting her back to our own site. This was because of usage abuse. however I don't want to have to keep adding every website he/she goes to all the time instead of working.

is there a way to restrict all web traffic with the exception of some of our internal servers and web servers?

thank you in advance
 

wrldwzrd89

macrumors G5
Jun 6, 2003
12,106
75
Solon, OH
Mac OS X has built-in controls that can achieve the lockdown you desire. Using a combination of restricting what applications are allowed (so that new browsers can't be installed to bypass the web restrictions) combined with the Parental Controls feature (applied to Safari, this restricts users to only what's in the Bookmarks Bar), should do the trick.
 

Fearless Leader

macrumors 68020
Mar 21, 2006
2,360
0
Hoosiertown
Have you tried talking to the employee and explaining the situation?
always a good idea.

Cut all outside internet access if possible, that would insure no more abuse. Use it after explaining that she can't go to those sites on company time, and if she goes there at all/or excessively cut the internet.
 

adese

macrumors member
Original poster
Feb 21, 2006
61
0
Sunderland, MA
Yes we have spoken to them multiple times. His/Her boss does not know the extent of the abuse yet but it is getting to that point. You have to understand this is a huge corporate setting and therefore it is socially awkward and complicated here with everything.

As for parental controls that is not an option since the user is on the default admin login. (I know I know I know)
 

adese

macrumors member
Original poster
Feb 21, 2006
61
0
Sunderland, MA
always a good idea.

Cut all outside internet access if possible, that would insure no more abuse. Use it after explaining that she can't go to those sites on company time, and if she goes there at all/or excessively cut the internet.
it's amazing, we've spoken to them so many times but they keep doing it all day without any regard for our wishes. he/she needs internet and network access to access file servers and web apps we have internally
 

TheAnswer

macrumors 68030
Jan 25, 2002
2,520
1
Orange County, CA
Just a few hypotheticals, because I don't know what I'm talking about... :(

Is their any way to limit her access specifically to the sites her work requires that have access to?

Barring that, any way your can write a script that runs daily that will monitor her usage and automatically add any new unauthorized sites to the /etc/hosts file at the end of each day?

It would also be nice if you could run something that anytime she accessed an unauthorized website, her boss would receive an email regarding it.
 

Fearless Leader

macrumors 68020
Mar 21, 2006
2,360
0
Hoosiertown
^^ you have a sick mind, but i like it.

I'm taking into consideration you are on the IT/IS team or other tech related area of you work enviroment.

you may want to set up a proxy, like squid.
 

Aea

macrumors 6502a
May 23, 2007
838
208
Denver, Colorado
Two thoughts here...

1) Little Snitch
2) Can the internal firewall (spotlight -> firewall) handle this type of blocking? Considering it is a 'nix style system it shouldn't be too hard to find a free firewall.