We have need for certain computers to have their Internet access limited to a list of sites, denying access to all others (white-listing).
Some of these sites use HTTPS, so the solution needs to support both HTTP and HTTPS.
I'm not super concerned about people bypassing the filter mechanism, as this is not really for malicious behavior but more for blocking the accidental malware click that has happened in the past.
I'd rather this be something that is installed centrally, rather than the list having to be maintained on each computer. We currently have a Linux Server that can be used.
I'm not opposed to buying another box, like some sort of firewall, given two conditions:
- It doesn't require a large annual subscription fee -- since we are creating the white list ourselves we don't care about a provider's list of appropriate websites.
- It allows for a reasonably high list of white-listed sites. I read the manual for one such box but realized they only allowed 64 sites in the white list, which is pretty small considering some sites have several domains associated with them.
I started setting up squid for this purpose and it seems decent, although a web interface would be nice for adding to the white list. Is there a better solution?