I would like to allow access to only 2 webites on my computer.

What is the simplest way to accomplish this?

Thanks

I think if you play around with OpenDNS you will manage to achieve that in no time.
opendns.com

Just block all networks and then set the two domains you want to always allow on your opendns account.

modify /etc/sysconfig/iptables
The following entries allow traffic from the two domains listed.

-A INPUT -s 172.35.111.239 -j ACCEPT
-A INPUT -s 172.35.111.233 -j ACCEPT

Also, use the /etc/hosts.allow and /etc/hosts.deny.
In the hosts.deny file you want to deny all by saying
all:all
The host.allow file migh tlook something like the one below. You need to add your IP's for each of the service you will be runnning. Add the netmask also.
#
# hosts.allow file for App Servers
#
ALL: localhost
in.rshd: 172.35.111.233/255.255.255.224 etc.... for each line.
bpcd:
bpbkar:
portmap:
lockd:
mountd:
rquotad:
statd:
snmpd:

I do not have a directory named sysconfig. I am using Mepis Antix. Should I make the file?

I would use a proxy server like squid, wich is also easily administered with webmin

Regards
JKZfixme

No, I doubt that would work. The files I mentioned are on the distros I work with. I 'thought' they were pretty universal. I was wrong.

Setting up a proxy sounds like another way to accomplish the task.

Maybe a stupid idea but how about playing with /etc/hosts.allow and /etc/hosts.deny?
http://www.itc.virginia.edu/unixsys/sec/hosts.html

Use dnsmasq. This is a really neat service.

On Debian/Ubuntu/Mint:

edit /etc/dnsmasq.conf

add this line to make all sites redirect to localhost:

add these lines to make specific sites use the DNS server at 8.8.8.8:

then restart the dnsmasq service:

Old thread but definitely one I needed to find! This almost does exactly what I am looking for - I need to block all web traffic but unfortunately this stops incominb TeamViewer sessions from working on the machine. Has anyone run into this and solved it? I'll of course keep digging but wanted to post here in case someone has invented that wheel already. I guess what I'm looking for is a way to disallow ALL EXCEPT, not just ALL. Or maybe it's a port that needs to be opened in the config?

Hm, think I actuall6y figured it out right after posting... seems the SERVER line does work on top of the ADDRESS line... I added server=/teamviewer.com/8.8.8.8 and restarted and it allowed it to connect!