New Office Networking

[kingkong]

Hi AO's


Our Organization has planned for a new branch

Which would be consisting of 7 PC in One Network connect among with a router

out of which 4 PC would be with the internet connection supplied though the same router

and other 3 PC would be without internet connection

now the problem is how will this 3 PC configured which would share their files and folders with the same network but without internet connection


I wanted a suggest on this very query
1) Can we setup a proxy on this PC
2) or else not to load or install the DNS setting


OR else any other ways??

Regards
KK

[SirDice]

I'd setup an extra box to act as a proxy. Set up the network so no-one can access the outside world directly. Have the browser use the proxy. You can use authentication on the proxy to decide who can access what on the internet.

[delstar]

Or you can assign it through GP. I believe there's an Internet Users group that you can control that through. We actually use that in combination with a proxy around here.

[brokencrow]

In that small of an office, what about configuring the browsers' proxy to
127.0.0.1:80 (and/or any other ports like FTP/21), then the browsers won't
load anything. The 3 computers are still networked otherwise.

What specifically are you keeping them off the internet for?

[kingkong]

Hi Broken Crow,

What specifically are you keeping them off the internet for?

It because they got caught in using illegal websites which are banned in this country and for which the ISP penalize the organization

Well this there a ways in which we dont install the DNS onto their computer and which would work fine with a little less amount of money usage..

(and there should also be a privilege in which if the organizaion thinks of letting them use the internet may be in future)

[omin]

Depending on the router you use you may be able to disable internet access for those computers from the router settings.
If not you could try installing dd-wrt on your router to give you the ability to block access to the wan based on MAC addresses (and much more).

[brokencrow]

Depending on the router you use you may be able to disable internet access for those computers from the router settings.

That should work too, though I've seen those cheap $50-60 routers act
too flaky sometimes. If you've got to seriously manage a gateway, it
really pays to get yourself into something better than those inexpensive
consumer models. IMHO.

[oofki]

Sure does! If you have a nice router you can setup ACLs and disallow those computers from accessing the WAN

[SirDice]

Make damn sure none of the users have local admin privileges. If they do, anything you do, setting dns or using an IP based ACL can be subverted.

Setting up your network so it doesn't route anything to the internet forces your users to use the proxy. To be able to use the proxy they're required to authenticate. That way you can really control who is able to surf the web. As for users giving their proxy credentials to someone else. Simple solution, anyone caught doing that will be fired on the spot.

[Ignatius]

I'd setup an extra box to act as a proxy. Set up the network so no-one can access the outside world directly. Have the browser use the proxy. You can use authentication on the proxy to decide who can access what on the internet.

The OP wants a network of 7 PCs so I assume that's a peer-peer rather domain. I'm coming at this from a theoretical point of view (no actual network admin experience) and am interested to know what software you'd recommend for a proxy on a peer-peer LAN. I appreciate that the each user's PC would be configured to use the proxy for internet access and authentication at the proxy would allow or disallow internet traffic to pass.

I've heard of ISA server but isn't that for a bigger setup on a domain? I suspect that would be excessive for the OPs requirement.