How to block access to certain sites on a budget?

Question

Computer networks

Good afternoon,
The company has about 10 PCs, 1 server (1C accounting, Windows Server 2012).
The management set the task of restricting access to the Internet when logging in through a remote connection to the server, as well as restricting access to some entertainment resources from local machines.
Question: How can something like this be done? Dug in the direction of Traffic Inspector, but it's paid and quite complicated.

Answer 1

wrap dns records about these resources on localhost) where is the budget

Answer 2

Set a proxy like squid . You close access to the Internet directly, configure the browsers of all users to work through a proxy. Twist the prohibition/restriction rules to your heart's content.

Answer 3

As already mentioned above - pick your tp-link D-W8968 for similar functionality. I glanced briefly - dns is not standardly blocked there, but in parental control there is url filtering. static.tp-link.com/res/down/doc/TD-W8968(RU)_V4_UG.pdf

Answer 4

This is usually done using a proxy server.
But you only have 10 PCs - it makes no sense to install separate computers for the proxy. You most likely access the Internet through some version of your home Wi-Fi router/gateway. These devices usually already have some kind of proxy, and use it.

Answer 5

If Windows has NOD 32, then it is enough to add all the prohibitions and permissions inside the antivirus. Maybe with a mask.
www.askvg.com/fix-access-denied-website-blocked-by...
This is what the user will see when he tries to access a blocked site
PS: Perhaps some other antivirus can do this.
PS2: What is good about this method is that neither openvpn, nor proxies, nor turbo modes will help with it.

Answer 6

there is a free solution, of course it may not be quite suitable, but there is a blocking of sites https://ideco.ru/obtain
There is a recording of a webinar on quick deployment and configuration https://www.youtube.com/watch?v=iptK-ntzIDU&featur.. .

Answer 7

Quite budget (free) and simple - register OpenDNS. Accountants usually do not climb into the network settings, but it is better to prohibit the ability to change settings.
https://www.opendns.com/

Answer 8

In addition, suggest to the authorities to install staffcounter.net PC monitoring (there is a free option) for Additional control of employees.

Answer 9

artica-proxy.com