Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My company wants to restrict access to some websites during office hours. How this can be achieved using Router or any other technique?

share|improve this question
what type of firewall are you using and how large of a company? – pablo Feb 15 '11 at 10:53
Basically you can't with basic router alone, if you want to block larger sites like facebook, as facebook servers are in multiple networks. Or you can, but it's really hard to maintain it. – Olli Feb 15 '11 at 12:49
@pablo Fyi My company has around 150-200 employees, as we are a growing company we would like to have these policies. – Sharjeel Ahmed Feb 15 '11 at 14:02
@ Olli if its not with router what would you recommend to achieve this? – Sharjeel Ahmed Feb 15 '11 at 14:12
what firewall do you have? – pablo Feb 15 '11 at 14:36
up vote 0 down vote accepted

Try Time-Based Access Lists Using Time Ranges .

This doc shows how it would work for some Cisco devices. Time-based ACLs were introduced in Cisco IOS Software Release 12.0.1.T.

With that being said, depending on your site and topology, and where you are logging to or managing configurations from, the answers involving squidguard or (implicitly) cyberoam might make more sense for you. All things being equal, priority for me would be maintainability.

share|improve this answer

I use squidGuard. SquidGuard is a URL redirector used to use blacklists with the proxysoftware Squid.

My squidGuard.conf:

time workhours {
     weekly mtwhf 09:00 - 18:00


acl {

     clients within workhours {
         pass     !hacking !violence !proxy !porn !mail !warez !gambling !drugs !audio-video !aggressive !paramon !redirector !suspect all
     } else {
         pass     any
share|improve this answer

A quick look at your firewalls website it looks like it can do this.

If you can provide more information on your firewall model/configuration I may be able to give you a more precise answer.

share|improve this answer

You can setup a web filtering server using Websense or McAfee Smartfilter. Both of these products are compatible with Cisco devices. Both are able to setup different policies based on time of day. The great thing about these solutions is that they require very little maintenance after they're setup. The URL lists are automatically updated as long as your subscription is valid. Here's a Cisco article that details setting this up on an IOS based router:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.