redirect traffic from restricted network

noir911 · 12-10-2008, 11:58 PM

I have a restricted network segment where people connect via DHCP and they can only go to one internal website (www.nms.org). I was wondering if it is possible that if they type any other website address (eg. www.slashdot.org) their traffic will be redirected to the internal website (www.nms.org). At the moment if they type any other website address, their browser gets timed-out.

The internal website server acts as their DHCP, DNS forwarder (so they can resolve the name www.nms.org), and web.

I have configured my router such that any IP address from the restricted network segment should only be allowed to the IP address of the internal website and deny all other traffic.

Thanks for any suggestions.

kenneho · 12-11-2008, 01:38 AM

Is it possible to add a default entry to DNS, so that client requests defaults to www.nms.org? Or maybe you could set up a web proxy that redirect traffic to that site.

noir911 · 12-11-2008, 02:34 AM

Quote:

Originally Posted by kenneho

Is it possible to add a default entry to DNS, so that client requests defaults to www.nms.org?

I think I know what you mean. But do I set this up in the primary DNS server? Or do I need to setup a separate DNS server for this network segment? What would the entry look like?

Quote:

Originally Posted by kenneho

Or maybe you could set up a web proxy that redirect traffic to that site.

Does this involve setting up a 3rd box? Is this an Apache proxy? What would the configuration look like?

Thanks.

NyteOwl · 12-11-2008, 06:31 PM

Perhaps the simplest would be to set the router to send all http traffic to the internal website. In this case it is easier to filter by protocol than IP. www-dot-nms-dot-org of course is an intent accessible parked page or were you just using it as an example?

kenneho · 12-12-2008, 01:40 AM

Quote:

Originally Posted by NyteOwl

Perhaps the simplest would be to set the router to send all http traffic to the internal website. In this case it is easier to filter by protocol than IP. www-dot-nms-dot-org of course is an intent accessible parked page or were you just using it as an example?

This seems like a good alternative to me a least.

kenneho · 12-12-2008, 01:43 AM

Quote:

Originally Posted by noir911

I think I know what you mean. But do I set this up in the primary DNS server? Or do I need to setup a separate DNS server for this network segment? What would the entry look like?

Does this involve setting up a 3rd box? Is this an Apache proxy? What would the configuration look like?

Thanks.

I'm not very into this stuff, so I don't know how you would set this up. But if your goal is simply to redirect all http traffic to a local machine, then I'd go for the firewall setting suggested by NyteOwl.

Tinker06 · 12-14-2008, 07:34 PM

The debian package "dsniff" provides utilities, among them one called dnsspoof which could give your webserver IP address for ALL queries. The problems this might cause for access to anything else on your network not withstanding, you would also have to configure your server to provide the same documents for ALL virtual hostnames that they could be requesting. If there are virtual host name servers running on your webserver it could be a real problem to do that. Just a thought...