RE: need advice [7:29392]

2001-12-18 Thread Eric Rivard

Unfortunately there is no single command to block all Adult and offensive
web site (let alone many commands that do so). If there was companies like
Little Brother and Websense would not be in business. To block Adult content
in websites you are going to need a URL web filter software like websense.
 
To block the PCs that you don't want access to the Internet either: 1.
Remove their default gateway if you have a flat network or 2. Remove the DNS
servers from their TCP/IP stack. If you are using IE you can also put
settings in IE to not allow any Internet Access.

-Original Message- 
From: mrfestus wariye [mailto:[EMAIL PROTECTED]] 
Sent: Mon 12/17/2001 1:21 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: need advice [7:29392]



i have just finished my ccna programme and i am
currently doing a 2 month internship programme with an
outfit that runs a cyber cafe business that provides
internet access services for the public.
i am their interim network administrator.
i have noticed a lot of loopholes in the network. and
some of my problems i need answers to are:-

1. how do i use a single command line to deny access
to all pornographic/adult sites on the network.
2. some computers within the network are denied access
to network(to use network resources like the network
printer).but the same computers can see the shared
internet access.

your useful advise would be appreciated.
yours truly,
festus taferi.




__
Do You Yahoo!?
Check out Yahoo! Shopping and Yahoo! Auctions for all of
your unique holiday gifts! Buy at http://shopping.yahoo.com
or bid at http://auctions.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29426&t=29392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: need advice [7:29392]

2001-12-18 Thread Alex Lei

Hello Festus:

1. This is a persistent and difficult problem. The short answer is, you
can't. There are a lot of products like Cyberpatrol, but they are not on the
router. Usually they are on the proxy servers, end PC's and firewalls. They
can block a lot of sites but not all. Filtering based on word list is not
entirely accurate, either. But they do work. Since you are just trying to
block porn access in a cybercafe, they are probably good candidates. But --
they cost money.

2. The second question is more like a Microsoft question, not sure. 

Alex


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29415&t=29392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: need advice [7:29392]

2001-12-18 Thread Godswill HO

Hi Festus,

I do not see anyway one access-list command can help you achieve your
objective. If you were talking of chatting and other stuffs that uses a
particular port number, then an access-list would be the answer. To use
access-list, am afraid you have to know the IP addresses of these sites and
block then individually. I will not advice you go this way, because it is
going to slow down your router.

If you are using a proxy server to connct to the net, Zonealarm is a
freeware on the net, download zonealarm into the proxy server and have it
deny access to these sites.

However, if you are not using a proxy server, the handy solution for you
depending on how technically sound your internet users are. Sometime in the
evening when everybody have gone home, you need to go round each computer
and do the following:
Assuming you are using Internet Explorer
1. Click on the Tools then Pick Internet Options
2. Click on Content and Pick Content Advisor
3. On Content Advisor frame, Click on Enable then click on the Rating tab.
4. You have the option to restrict users to sites base on content of that
site eg
--Language, Nudity, Sex and Violence

The is posisble because at registerations sites are classified accordaing to
their contents and so each time anybody access the internet through that
computer, it validate the site againt the database stored on the internet
before pulling up that site.

On your second question, Remember you have to login into the domain to be
able to use the Network printer. Make sure, you are login and confirm from
the NT PDC that that computer had actually login with a valid user ID. Also
check privilidges and Access control list on the shared printer, make sure
that everyone have Full access to the Printer.

Regards.
Oletu
- Original Message -
From: mrfestus wariye 
To: 
Sent: Monday, December 17, 2001 1:21 PM
Subject: need advice [7:29392]


> i have just finished my ccna programme and i am
> currently doing a 2 month internship programme with an
> outfit that runs a cyber cafe business that provides
> internet access services for the public.
> i am their interim network administrator.
> i have noticed a lot of loopholes in the network. and
> some of my problems i need answers to are:-
>
> 1. how do i use a single command line to deny access
> to all pornographic/adult sites on the network.
> 2. some computers within the network are denied access
> to network(to use network resources like the network
> printer).but the same computers can see the shared
> internet access.
>
> your useful advise would be appreciated.
> yours truly,
> festus taferi.
>
>
>
>
> __
> Do You Yahoo!?
> Check out Yahoo! Shopping and Yahoo! Auctions for all of
> your unique holiday gifts! Buy at http://shopping.yahoo.com
> or bid at http://auctions.yahoo.com
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29467&t=29392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: need advice [7:29392]

2001-12-18 Thread Jesse Loggins

Question number one as far as I know is almost impossible. As for question
number two you have two options, A)Access Lists or B)VLANS.
Maybe others will have other alternatives. HTH!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29458&t=29392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



need advice [7:29392]

2001-12-17 Thread graham claudette

I am planning on purchasing the "CCIE SECURITY WORK BOOK" for a Christmas
gift.  Any one have any feedback on this book or know of a cheaper price
than $200?
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29430&t=29392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



need advice [7:29392]

2001-12-17 Thread mrfestus wariye

i have just finished my ccna programme and i am
currently doing a 2 month internship programme with an
outfit that runs a cyber cafe business that provides
internet access services for the public.
i am their interim network administrator.
i have noticed a lot of loopholes in the network. and
some of my problems i need answers to are:-

1. how do i use a single command line to deny access
to all pornographic/adult sites on the network.
2. some computers within the network are denied access
to network(to use network resources like the network
printer).but the same computers can see the shared
internet access.

your useful advise would be appreciated. 
yours truly,
festus taferi.




__
Do You Yahoo!?
Check out Yahoo! Shopping and Yahoo! Auctions for all of
your unique holiday gifts! Buy at http://shopping.yahoo.com
or bid at http://auctions.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29392&t=29392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]