From owner-freebsd-questions@FreeBSD.ORG  Wed Apr 11 10:23:32 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 0855216A400
	for <freebsd-questions@freebsd.org>;
	Wed, 11 Apr 2007 10:23:32 +0000 (UTC) (envelope-from juancr@dsa.es)
Received: from llca513-a.servidoresdns.net (llca513-a.servidoresdns.net
	[217.76.128.120])
	by mx1.freebsd.org (Postfix) with ESMTP id BB10713C44C
	for <freebsd-questions@freebsd.org>;
	Wed, 11 Apr 2007 10:23:31 +0000 (UTC) (envelope-from juancr@dsa.es)
Received: from mail.dsa.es (localhost.localdomain [127.0.0.1])
	by llca513-a.servidoresdns.net (Postfix) with SMTP id E9C90FE72D6
	for <freebsd-questions@freebsd.org>;
	Wed, 11 Apr 2007 12:23:29 +0200 (CEST)
Received: from 217.114.136.133 (SquirrelMail authenticated user faf352c)
	by llca513-a.servidoresdns.net with HTTP;
	Wed, 11 Apr 2007 10:23:30 -0000 (GMT)
Message-ID: <2023.217.114.136.133.1176287010.squirrel@llca513-a.servidoresdns.net>
Date: Wed, 11 Apr 2007 10:23:30 -0000 (GMT)
From: "DSA - JCR" <juancr@dsa.es>
To: freebsd-questions@freebsd.org
User-Agent: SquirrelMail/1.4.2-0.1.7.x
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
Subject: Forbidding or not access to webpages of network users 
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Apr 2007 10:23:32 -0000

Hi all in this list

I want to know if there is a way to forbid to network users the access to
fixed webpages.

The example, I work in an enterprise in which several users are accesing
to webpages others than the enterprise's own.

I want that the users can only access to the the webpages and services of
the enterprise, but also that 2 PC can access everywhere (the boss ones).

Can I make it with FreeBSD? How? I have read the Firewall handbook pages,
but i don't know exactly if i can do it with PF, IPF or IPFW (or something
else). (examples?)

My users are W2K.

On the otherhand, I think this is a common problem, isn't it? ;D



Thanks in advance

Juan Coruņa
Desarrollo de Software Atlantico