How to restrict Internet access?

Question

System administration

Came to work in the organization and then a mess. Everyone is on social media. By what means can you restrict access to the Internet and allow you to go only to certain sites? Are there free solutions for organizations?

Answer 1

It is solved quite simply. A gateway is installed (linux, if not a familiar beast, then pfsense). The http and https ports are blocked (http is transparently proxied if desired), the squid+squid guard proxy is launched. Everyone accesses the Internet only through a proxy (you can completely disable access to the Internet bypassing the proxy), which already filters where and when it is possible.

Answer 2

Well, let them sit. You still take away their phones and search them at the entrance.
This is done through a proxy, you are the administrator, you should know.

Answer 3

So what? Let them sit.
If it is necessary to restrict - the director of the enterprise notifies everyone that it is forbidden to do this.

Answer 4

Furiously I upvote SyavaSyava :) But you first need to convey this to the director, because the admin is an important person, of course, but in the SDS he is by no means at the very top. The director issues an order "In order to optimize the use of working time blah blah blah ...", lists measures - prohibit, limit, establish, control, appoints you responsible. Having received some administrative rights, you organize a gateway on Linux (you still have to buy a wheelbarrow for the gateway), set a proxy, block all social networks with the help of a proxy, just do not forget to make sure that the director is not blocked :D well, access to the Internet bypassing the proxy just cut on the gateway. Voila.

Answer 5

Let's look at the issue from the other side. A person spends a third of his life at work. Houses of worries and troubles. Where should he sit on the Internet? It's one thing when you're a salesperson and you can't take your eyes off work at all. What if you are a supplier? Here you scattered everything where necessary .. designed and sit all day. Do you think a supplier's free time can increase the productivity of a firm... if it fixes sewers around the city? I have people come home from work, and according to their own stories, they have no desire to surf the Internet! They are engaged in family affairs .. they rest .. in short, they build a full-fledged cell of society. Therefore, here you need to clearly understand what goals you are pursuing. Definitely you can not set limits on lunch time. The daily limit can smoothly develop into a narrow channel sufficient for communication in VK or ok. But no more than that restriction. Also, you need to understand... that by cutting off a person from the information field .. you have a bad effect on his brains. And this is bad for a permanent employee. Therefore, your task is to bring people to the state of "there is an Internet and I use it as needed." And the task is to "load these people with work in their free time" ... let the heads of departments and managers do it !!!!!