1

I need to block Gmail and Yahoo mail on school network. Block IP addresses in windows Host file, Block in router, App, ?
Suggestions and addresses ? I also need to block downloads music, Movies streaming, Apps, Videos, Social Media? Thank you
Rick

3 Spice ups
2

Schools should have some type of proxy or UTM to filter content.

You can block it using those.

If you don’t have one, you should look in to them, Squid is free if you’re willing to learn how to set it up yourself. Block based on categories.

3 Spice ups
3

I worked for years in schools. Get yourself a firewall designed for schools and it will have and its content filter to the ability to block things like email addresses and social media.

5 Spice ups
4

You are operating in a very dynamic and risky environment. I am sure there are few of the students are smart and skillful enough to annoy you.
You must have a firewall, and not just to block and restrict access, but also to report and analyze the daily traffic. Of course, you need protection from malware and viruses, as well as an intrusion detection system. For school environment, it is a mandatory minimum.

In addition to its fundamental security functions, a firewall allows you to create tiered internet access levels, implementing different degrees of restrictions and allowances. You can take this further by designing intricate policies, fine-tuning access controls, and optimizing security rules. The possibilities are vast—you can truly get creative with it, making the system as flexible and robust as your environment demands. If you enjoy problem-solving and strategic configurations, working with firewall policies can be an engaging challenge!

3 Spice ups
5

I did this type of thing with the HOST file. There are several sites that will allow you to download a HOST file modifier for free.

6

You can also modify it in notepad, for free.

This is cumbersome and not practical though if you had to do 1000 devices.

Besides, it can be easily bypassed by using an online proxy.

3 Spice ups
7

It’s not 1987 anymore. just modifying the HOST is NOT enough for more reasons than I can possibly enumerate.

1 Spice up
8

When I would setup the computer, I would run my script and block the sites. Worked for me at that school.

9

Great if you own the machines, and in the process of building them, but no good for BYOD.
Not practical if the machines already exist.
You’d need to have all sites in there, not just google.com for example, but google.co.uk, google.de, google.ie, google.au and so on, otherwise someone will find a way round this.

There is nothing dynamic about host files and therefore they can be circumvented.

Ideally you need something that is dynamic, easy to manage, central and not something that can be bypassed.

1 Spice up
10

I strongly recommend implementing a firewall, as it is an essential security measure. Many reputable open-source firewall solutions are available, and they are widely used in production environments. Since I assume you’re convinced, here are a few important points to consider:

  • Hardware Requirements: You’ll need a PC with multiple network cards—preferably 1Gbps or 10Gbps—but driver compatibility is essential. Since these firewalls run on Linux rather than Windows, it’s crucial to research the firewall solution, identify the Linux distribution it uses, and verify driver support. Many users face issues with incompatible hardware, struggling to find suitable drivers.
  • Log Management: Firewall logs often require substantial storage capacity, which can significantly increase costs. Proper planning is necessary to ensure efficient storage management.
  • Implementation Challenges: If you’re introducing a firewall for the first time in a large network, expect a demanding workload for several days. Strategic planning and a well-defined implementation timeline will help ensure a smoother transition and minimize disruptions.

By addressing these considerations in advance, you can optimize your firewall setup for security and efficiency

11

I have a two layered approach - first is our firewall which I can limit both web and app traffic. Then I use Deledao as our webfiltering on the devices as a secod layer - so they are filtered offsite. Both of these have price tags attached - but should be a priortity to be funded in any school district.

1 Spice up