How can I prevent Desktop Users from accessing any online website? I tried 127.0.0.1 * in /etc/hosts but it didn't do the trick.
Please note that I need to keep http://localhost fully functional.
The quickest (albeit very circumventable method) in my mind would be to break the DNS lookup. What you're doing in
Anyway, remove the wildcard entry from
Either way, set the connection type to "Automatic DHCP (Address only)" or "Manual" and then set the DNS server as
In network manager, this will look something like this:
Click apply. It'll hopefully reconnect and then websites not listed explicitly in
The workaround that any user can use is they can just type in the IP of the website they want to connect to. You'd need to break more gateway settings to fully neuter the machine.
Note this will probably cut you off from updates. If you want to still get updates, add manual DNS strings to
Another, more robust method, is to install a content screener like DansGuardian. This, with a couple of
IPTables is the thing that makes this rock solid. Only somebody with root or full sudo access would be able to circumvent this. It's a bit more work than just cutting off DNS lookups though.