Controlling access to prevent excessive usage

[radicool]

I need to install GPRS cards on some client PCs so that these clients can access certain Internet services. However, the client doesn't want their users to be able to access any other sites, download e-mail etc, because this will become expensive for them over GPRS.

Whatever option is chosen doesn't need to be extremely complicated to overcome, but preferable there should be some sort of control to prevent the users from just disabling it.

I fiddled a bit with disabling the GPRS connection as the default gateway and then adding some routing (which is what I've used before for some other clients), but the problem is that there are too many services in this case so its becoming a bit complicated.

Anybody know of any good software for controlling Internet access?

 

[vodacom3g]

I need to install GPRS cards on some client PCs so that these clients can access certain Internet services. However, the client doesn't want their users to be able to access any other sites, download e-mail etc, because this will become expensive for them over GPRS.

Whatever option is chosen doesn't need to be extremely complicated to overcome, but preferable there should be some sort of control to prevent the users from just disabling it.

I fiddled a bit with disabling the GPRS connection as the default gateway and then adding some routing (which is what I've used before for some other clients), but the problem is that there are too many services in this case so its becoming a bit complicated.

Anybody know of any good software for controlling Internet access?

You already understand that if you want to block a site level, you'll have to do it with an IP access list, either in a routing table, firewall or proxy.

There are services like this available (the Vodacom adult content management uses such a service) but this probably won't work for you.

So only pass the protocols you need (probably HTTP and HTTPS) and then add IP filters.

Maybe think at a completely different level, how about a billing structure where users pay for any traffic outside an AUP.

 

[ic]

Assuming we are talking about Windoze here, then there are firewall solutions available that will do this sort of site & protocol-level blocking, and password protect the settings to prevent users from changing stuff, example Computer Associate's EZ Firewall [not the free 'version'], but if you really want administrative control over just about every aspect of the user's PC and internet access, then try this...

 

[cisco_trouble]

most software firewalls should do the trick,and create a guest account or restrict access to the firewall by password....access-lists will only work on routers, switches, concentrators...unless the OS is linux...then u may tweak all u want....

 

[ic]

...unless the OS is linux...then u may tweak all u want....

Ditto that .