How to restrict employees access to entertainment sites? 15 people in the organization, there is no domain, there is a main PC on it Debian + samba, the main router TL-WR740N At the moment everyone has free access to the Internet. It is necessary to restrict access to certain people separately so that they do not go to various sites, even to news

  • Put on your "main PC", for example, squid, configure it, wrap all your users on this proxy, and on the proxy ban sites that should be banned. - de_frag
  • and if a lot of sites? add manually? In this case, what do they do? - Yerzhan Aktanov
  • 2
    For the office of 15 people manually added. For an office of 1500+, you can buy something like barracuda.com/products/websecuritygateway - de_frag
  • Thank you very much! - Yerzhan Aktanov

2 answers 2

Your TL-WR740N router has a built-in mechanism for this. In the Access Control menu, you need to configure:

  1. Shedule - the duration of the ban (for example, from 9 to 17 on weekdays)
  2. Target - what can not (list of sites that can not go)
  3. Hosts - who can not (list of computers on which the rule will act)
  4. Rule - the actual rules. Enable the "Enable Internet Access Control" checkbox, select "Deny the packets specified ...", click the "Add new" button and create a rule. Come up with a name for the rule and select from the lists below the already created groups "who can not", "where it is impossible" and "when it is impossible".
  • Thank you very much for the detailed answer, and can you always block the Internet completely? - Yerzhan Aktanov
  • There is also the setting "Parental Control" in the router - it is configured to whom, where and when it is possible, but everything else is impossible. :) if everyone does not need to see the Internet forever, you can simply register the wrong ip address in dhcp and all those who are not statically registered settings will not be able to find the site by name. or vice versa - to prescribe the address on the computer to those who do not need the Internet. But it's easy to get around if you own the topic. - dash1121
  • There are no admin rights, I think just to turn off the grid, or in the router, can you block the Internet at the MAC address? - Yerzhan Aktanov

If you need to open access to only certain sites on this router, then you need to use the "Parental control" menu

  1. tick enable
  2. click "add new ..."
  3. Fill out the form starting from the second line enter image description here