Restricting Internet access using ARD

I am trying to restrict students for accessing the internet using ARD. Students accounts are set using Workgroup Manager. Under preferences, I did not allow Dock.app or Safari in the list of aproved applications. I also only selected applications I allow them to use to be in the dock and did not allow them to merge their dock.
One group still has Safari listed in the dock.
The others can still get to the internet using dashboard and going to weather settings.
How can I eliminate this access.

One option is to send the unix command:
ipfw add 2005 deny tcp from any to any 80 out xmit en0
This will block the standard internet port. If the computers are restarted then it will go back to normal. To get rid of the rule without actually restarting use this command.
ipfw delete 2005
Note: They have to be done with the root (or admin) user.
PowerBook G4 15in, Xserve, G5 Dual 2ghz, Mac OS X (10.4.3)
PowerBook G4 15in, Xserve, G5 Dual 2ghz, Mac OS X (10.4.3)

Similar Messages

I turned off Internet access, using airport timed access control. Now, I can't turn it back on. The base station can't be found. Please help.

I turned off Internet access, using airport timed access control. Now, I can't turn it back on. The base station can't be found. Please help.

Can you take a look at this one and offer your opinion please?
https://discussions.apple.com/message/21889032#21889032

No internet access using manual TCP/IP settings after 10.4.6

I stopped being able to access the internet with manual TCP/IP settings in the Network Preferences after updating from 10.4.5 -> 10.4.6.
When I change settings to use DHCP everything works fine, but I need to get the manual settings working as I use them quite often when configuring/setting-up routers.
This happens with both the AirPort and Ethernet interfaces, so it doesn't matter which interface I use to connect through.
My network Locations with manual TCP/IP settings have worked fine with 10.4.5, under the same networking hardware (routers, cables, etc...).
This occurs both at home (with my Linksys wireless router) and at work (with a DrayTek router).
At home, this problem occurs with both my PB12 and my wife's iBook12, after the 10.4.6 update was applied.
At work, all Windows laptops can connect to the internet using manual TCP/IP settings, but not my PB12.
Example of my settings:
- IP: 192.168.1.99
- Mask: 255.255.255.0
- Router: 192.168.0.1
- DNS: <empty>
- Domains: <empty>
Already tried, without success:
- verified disk -> no errors found on disk!
- repaired permissions, using Disk Utility, rebooted and tested -> no connection!
- tried with DNS=192.168.0.1 -> no connection!!
- tried with DNS=[my ISP primary dns] -> still nothing!!!
- even tried reapplying the combo update 10.4.5 -> of course, it didn't let me, as I'm now in 10.4.6!
Any thoughts or ideas to fix it and make it work in 10.4.6?
... other than archive&install, in order to downgrade!
PB12'' @ 1,33 GHz w/ 768MB RAM Mac OS X (10.4.6)

Yes, buy I also state in my original post that I:
- tried with DNS=[my ISP primary dns] -> still nothing!!!
but yes, I probably should have titled it "No network access using..." (posting as 4:30 AM was probably not the best idea :D)
I understand I might have been a bit clumpsy posting my problem and appreciate everyone's corrections to what I wrote, but trust me that I have done a lot of tests and spent many hours on this... Bear in mind that I am using a network Location with manual definitions that was working before the update!
Anyway, as it happens, the likely culprit now seems to be more of a 3rd party software's inability to deal with 10.4.6 rather than the 10.4.6 itself!
I've disabled/unistalled/turnned off/deleted (depending on the app) anything NOT Apple that had anything to do with networking, be it for monitoring, controlling or managing (just to name a few: Little Snitch, Menu Meters, BrickHouse, etc, etc, etc...).
The Location with the manual settings is now working fine (at least at the office).
Over the next week or so I'll incrementaly re-install those 3rd party tools (which were most likely not up-to-date anyway) and see if something breaks at some point... but won't put much effort into it -- just happy to see it working again!
I'm closing this for now, as I don't have any more time for it (work is pilling up!)... If I manage to find out which version/app combination was causing the problem I'll post it back here!

Control Internet access using machines names

Hello to all, I have some machines (> 100) that are DHCP client and are on different subnets. I need that users that work on these machines don't access Internet. Is a there a way on TMG 2010 to create any
kind of control to accomplish this need?
Regards, EEOC.

Hi,
You can only control the traffic with IP addresses not computer names. A other way to limit internet access is to use users and groups in TMG firewall policy rules. The clients must be Webproxy or TMG clients
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

Restricting Wireless Access using ACS 3.3

We are currently running ACS 3.3 and I am trying to figure out how to restrict Wireless access to specific user groups. Our current setting is using PEAP and ACS as the Radius. Our user database is mapped to Windows 2003 AD. I've got the PEAP working and the radius authentication is also working but I cannot seem to figure out how to restrict the wireless access to specific Windows/ACS groups.
Erik

Hi,
On ACS 3.3.x You can certinly achive this, al you have to do is configure NAR( Network Access Restriction) Here is the link which should provide you further informatio on it.
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a00801a8fd0.shtml
-Parm

WRT54G configuration for internet access using Lacie Network Space Max

Please HELP!!!!
I have tried for the past 2 weeks trying to configure my router WRT54G so it allows me to access the Lacie over the internet without luck. I have followed every instructions from Lacie and every other FAQs and help on the internet, still no luck. I have spent numerous days with Lacie tech support and they could not figure it out - why my router would not allow me access over the internet. I am hoping that the big guns here can help me.
I have a number of laptops connected wirelessly to my local network and every laptop can access the Lacie NAS hardwired to one of the ports on my router. My entire system works wonderful locally.
The Lacie has been assigned a static IP of 192.168.1.199
My local network has a starting IP of 192.168.1.150 and ends at 192.168.1.199
My router's IP is 192.168.1.99
I have assigned port forwarding for my Lacie (192.168.1.199) for ports
20, 21, 25, 80, and 443.
I have tried other setups but no help. Please help!!!
Happy New Year!!!
Solved!
Go to Solution.

Scrooge... thanks!
My NAS has ftp enabled. Access to the network is excellent throughout my local network. Every PC, wirelessly, can access everything on the NAS without any problem. Even when using the web browser using the IP or the dyndns.org assigned to the NAS. (I signed up for a free dynDNS)
The NAS can be accessed throughout the local network using explorer (under the network directory) and also by mapping the drive. The NAS can also be access using the web browser by either through its assigned IP (192.168.1.199) or by using the NAS's dyndns.org web address (web access requires login since it accesses the Network Space Max web page) - both by http and/or by ftp
My problem is accessing it through the internet outside my local network, i.e. from my work place or any other place away from home. The ability to access my data away from home is what I really wanted to be able to do.
"Open the setup page of the router and go to Status tab. Note down the Internet IP address.
Open the Internet browser and in the address bar type http://Internet_IP_address:21 or ftp://Internet_IP_address .
See if that works for ftp server."
Using the router's IP address for both format, http and ftp - I am not getting connected, even in my local network. Using NAS's static IP 192.168.1.199, I am able to access only using the ftp format. http://192.168.1.199:21 does not take me anywhere, but without the :21 takes me to the login page.
Again, thanks for all your help.... I am lost and I need your HELP!
v/r,
abelts

TS1741 Internet access using apple tv

Can I access the internet and other apps using my apple tv.

These services on the Internet you Can use from the appletv
http://www.apple.com/appletv/
Nothing Else

Restrict URL Access using location directive

I'm trying to restrict access to a URL using the location directive in Apache.
I want to allow access to "/analytics/saw.dll?WSDL" to everyone and restrict access to "/analytics/saw.dll?Answers" to certain IPs.
Putting the URLs in location directives doesnt seem to work. I believe the problem is the ? which is a wildcard.
<Location /analytics/saw.dll?WSDL>
Allow from all
</Location>
<Location /analytics/saw.dll?Answers>
Order Deny,Allow
Deny from all
Allow from 192.168.2.161
</Location>
Can anyone help?

Hi,
1.
What about using an Authorization Scheme and then using Security of Page Attributes.
In fact it is schema of users, roles, and passwords.
2.
f?p=App:Page:Session:Request:Debug:ClearCache:itemNames:itemValues:PrinterFriendly
f?p=6000:6004:&SESSION.::NO:6003:MY_ITEM1,MY_ITEM2,MY_ITEM3:1234,,5678
This example:
* Runs page 6004 of application 6000 and use the current session ID
* Clears the current session's cache for items on page 6003
* Indicates debug information should be hidden (NO)
* Sets the value of MY_ITEM1 to 1234, sets the value of MY_ITEM2 to null
(indicated by the comma used as placeholder), and sets the value of MY_ITEM3 to 5678
- Into Column Attributes/Column Link/Link Text pick an icon.
- Select for Attributes/Column Link/Target “URL” for table Emp_Address and into URL field type:
javascript: popupURL('f?p=&APP_ID.: 6004:&SESSION…………');
You can use the value of any Item. Then in the URL link page check that item.
Moreover, you can use f?p=&APP_ID.: 6004:&SESSION…..My_Item:#ReportColumnName#.......
I hope this would help.
Konstantin

Restricting Wireless Access using BT Home Hub

Hi
I am trying to set up my BT home hub so that my daughter can only have limited access (fed up with her being on FB 24/7!)
I thought I had done by using the set up access mode, but I have a feeling that this is not working all the time. Has any one else managed to successfully do this?
Thank you for reading and would be grateful of any advice as this is driving us to the brink!

Did you follow the intructions on this site?
http://bt.custhelp.com/app/answers/detail/a_id/11364/~/what-is-bt-access-control-and-how-do-i-set-it...
Are you sure that she is not simply bypassing it via the hub manager?
You could change the hub manager password.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Internet access using the 3G net in Sweden

Hi! Swedish users hopefully understands what I meen if my English is poor. Thinking about buying a iTouch, my question is if it is possible to get online using a 3G modem? My provider in Sweden is Telenor and I have one of theirs modem.
Thanks!
/u

frittfall,
The iPod Touch uses WiFi only.
The iPhone will use EDGE networks where available. In the U.S. most GSM locations that have 3G also have EDGE, including all of AT&T's 3G areas. EDGE, sometimes called 2.5 or 2.75G, was skipped over in some countries, and so you will only have GPRS (2G) in 3G areas.
Hope this helps,
Nathan C.

Restrict aaa access using command authorization windows acs3.6

i need to enable aaa users to shut and unshut interfaces but nothing else. i already have all the users and groups setup but when i modify the command auth set to include "configure" "permit term" they are given unrestricted access.
any help appreciated

On the router there's a:
aaa authorization config-commands
command, make sure you have that in. You then have to set up command authorization on the TACACS server to allow "interface permit any", "shutdown" and "no shutdown" commands.

Using Airport Express to share a hotel in-room Internet access

Hello,
I am new to these discussions, and I would like to know how to share hotel in-room cable Internet accesses using my Airport Express as efficiently as possible.
For the moment, I connect the in-room cable Internet to the AE with the "+Internet Connection Sharing+" setting set to "+Off, Bridge Mode+", which allows my wife, kids and myself to connect simultaneously, but we need to each use a separate hotel-provided password.
Is there any way to change the settings so that I need only a single password for the AE, to be then shared by all the computers simultaneously?

Not too likely. Each computer will require a unique ip address so the network will see each computer as individual computers and require a password for each one.
Glor

I want to disable Internet access to user using GPO

I am using Win Server 2008 R2, I want to disable the users from accessing Internet which are in that OU. Can anyone tell me how is it possible ?

Hi,
Disabling Internet access using software on the client is inherently difficult. The client isn't aware of what is an internal resource (like an Intranet page for example) as opposed to an Internet resource. You can use GPOs to disable specific programs
(like browsers) or to change how traffic is routed by the client but in order to effectively control who can and can't access the Internet, your best bet is a perimeter device like a proxy or firewall that sits between your clients and the Internet and is
integrated with AD so it can manage access to the Internet based on users, groups, IP addresses, etc.
The closest you can come without a proxy is to configure a proxy server address for those users using the Internet Explorer Maintenance component (found under User Configuration\Windows Settings). This proxy can either be a non existent address or
if you want more control over the error messages users get, it can be an internal web server with a page that provide a custom message. The same configuration will allow you to list specific URLs that are exempt in case you have specific web sites, internal
or external that must be available.
Note that this option will apply to all browsing, internal and Internet based, but will only impact IE. Internet access using other browsers or other software will not be impacted unless that software leverages the IE proxy configuration (which many
applications do).
Hope this helps,
Guy

How to block internet access for RDS and RemoteApp users?

Hi everyone,
This question might partially belong to security forum but I think anyone using RDS services comes across this. I would like to TOTALLY block all internet access including "updates" to any software, windows updates, anti-virus updates, TCP, UDP,
or ANY other protocol out of the server. I would like to only allow traffic both ways for established traffic (e.g. accessing the remote apps).
How can I achieve this without involving a third party firewall software?
Thanks

In our visitor center, we setup a computer with fake proxy server and add our website to the exception so that the visitors access our website only and no other website. If this RDS is for internal use only, you may disable default gateway. This link may
give you more options.
how to
restrict internet access
How to restrict Internet Access. You may have many options to disable a user or
computer to access the Internet. Some options can be adopted for many users
www.chicagotech.net/Internet/restrictie0.htm
Bob Lin, MVP, MCSE & CNE Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.howtonetworking.com

Blocking internet access in a virtual windows xp box

Is there a way to block internet access when I have a virtual windows xp box within Windows 7?
The reason, is I just want to run one application and restrict internet access as I some users are restricted from the internet.
Thanks
John

Hi, Juke.
I'm afraid I'm a dummy, and don't know how to do this. I'm sure as April 8 approaches, a lot of people with important DOS or XP apps will be wanting to insulate their XP VM from potential hacking while still running programs locally.
Thanks -- Dave K.

Restricting Internet access using ARD

Similar Messages

Maybe you are looking for