I have a small network with DLink DI707 router. I do not have any server running at the moment. What is the best way to block inappropriate sites from the internet reaching any of the computers on my small network. If I let the cable connection to go to one compter and run a server software on this computer and then connects this computer to the router. Would this work? What server software I need? Do i need any other software like net nanny as well to run on the server? Or Can I achieve the same result without running a server and without installing the software like Net Nanny on every maching? My goal is to make sure no user can tamper with this restriction when it is running, and therefore I do not want to run someting like Net Nanny of every computer? Please help. Thanks

I have a linksys router. My router will let me filter some ips. maybe d-link can do that. check with your d-link. 2nd option is not to let user use direct access to the computer. If you install proxy server, you can have full control in one machine. Hope that helps.

The best way IMHO is to connect it like this: Internet --> Proxy Server Computer --> Workstations You can get server-based filtering software from N2H2 at http://www.n2h2.com/ or MTD Technologies Canada, Inc. at http://www.mtdtechnologies.com/ If you have any other questions, you can let me know. Matt

Matt do you mean Internet -> Computer with two NIC and running Windows XP + Server Software Second NIC in Server --> WAN port on my DLink Router DI707 All other workstations will be connected to the other ports on the DLink DI707 If this this not correct, please advise. Also What Server Software I need to run on the Computer with two NIC. Regards, afkaron

Yes, sorry I didn't explain that too much. The proxy system I am referencing below has two NICs. Internet --> Proxy NIC 1 Proxy NIC 2 --> Router --> Workstations Just plug the other NIC (nic 2) into a standard computer port (not the wan port). Make sure DHCP is enabled on the router (see the manual) Nothing should be plugged into the WAN port. Once you get the network configured and functional, I can encode a special version of Internet Explorer for you that will not permit the users to change any settings. However, the software can cost quite a bit. AllegroSurf costs at least $50 someodd bucks US for a standalone (if i remember correctly). You can download a free proxy server for use on the one with 2 NICs and have it forward requests to my filterserver at filtering.mtdnetwork.com port 8080. OR: You can plug your internet connection into the WAN port and configure your network for basic internet access. When that has been achieved, set the proxy on each computer to be: filtering.mtdnetwork.com Port: 8080 You will need to enter a User ID/Password: It is afkaron/afkaron Do you have a static IP? If so, email it to me so I can set it so that you don't need the user/pass. EMail me if you want an override user id to bypass filtering for yourself. Matt

Matt Thanks for the good info. Do I need to run Windows 2000 server on the the server Machine before I install any proxy server? Or the proxy server will work equally with all its options on any Windows like even win98. My ISP states that my IP Address is not static. Although my IP Address hardly changes.

If you want to use a solution like Microsoft ISA Server with N2H2 filtering (www.microsoft.com/isaserver/ and http://www.n2h2.com/), then yes you will need to use Win2k Server You can order an eval copy of 2k advanced server that is fully functional, or you can try .NET (http://windowsbeta.microsoft.com) Otherwise, you'll have to use a 3rd party app like AllegroSurf (www.allegrosurf.com). I highly recommend N2H2 as it has filtering already set up. If you go with AllegroSurf, you have to block the individual sites themselves. I have a live N2H2 filtering server running if you want to use it. Let me know if you want to use it and I can help you set it up. Matt