views:

777

answers:

7

Hello everyone,

I need to write some code to trigger internet connectivity on a computer. By default,internet should not work.

But,after installing my program,internet should work.

Ofcourse the computers are connected to my server and normally access internet through DHCP right now. But,give me some ideas to make things in such a way that only installing my program enables internet connectivity.

Thanks

A: 

Zone Alarm does something similar, where I've seen it disable "interet access" i.e. certain ports when it thinks you have a trojan.

scottschulthess
mm...i want to code it tho..
Josh
A: 

I don't understand how you would disable internet access in the first place, before your program even exists on the computer.

However, if you are bound to a corporate network, maybe a group policy that forces Internet Explorer to use a specific proxy (your program in this case). That way, web browsing doesn't work until your program is loaded. And another group policy that disables the possibility to change proxy settings. To prevent these things in Chrome, Opera, Firefox etc. is another matter....

Magnus Johansson
No,I don't want to use a proxy though.I don't want to stop the internet.I'll disable internet on the server. I wish i could make some server program to be installed on the server and client program to be installed on the client. I want to enable internet when client authenticates with server... Thats my idea...but I have no idea how to go ahead...
Josh
A: 

Here you go

http://blogs.msdn.com/daiken/archive/2007/02/09/enable-disable-network-connection.aspx

PSU_Kardi
Noo, I didn't mean disabling the adapter...I basically want to write a script that allows only computers under the domain to access the internet.
Josh
A: 

Ah, this is an easy one then. Buy a router, install it, go to 192.168.1.1, enter your password, then set it up to authenticate based on MAC addresses, or to require user passwords, whichever more closely resembles your current plan :)

ryansstack
+1  A: 

I know you don't want to use one, but the correct & easiest tool to use would be a proxy.

You'd have to program something to enable some client/server/proxy communication, but a proxy would be the way to go.

But maybe we're not understanding your requirements- why is a proxy out of the question?

I'm curious to know if a vpn setup would work for you. Although that's just a variation on a proxy..

edit: Check out Squid - I don't know what you're using for the rest of your environment, but it supports mysql authentication. There is an 'enable' flag on the mysql table that you could control with your server.

Good luck!

Nathan
yeah,something like a vpn setup is a great idea!!!I don't mind using some specialized authentication program like a proxy...but not a normal socks/http proxy configuration on browsers
Josh
But How do I implement a VPN setup programmatically?
Josh
That was a great idea...I really appreciate it...i never thought of that so long. But then I need a way to programmatically do VPN connection during logon invisibly.
Josh
I think if a VPN is OK, then a proxy would be better- without the overhead of the secure tunnel it does the same thing!
Nathan
A: 

What you are trying to do falls in the realm of 802.1x. Read up on that technology and the possibilities of enabling outbound routes once a user has authenticated.

caskey
A: 

I think he is talking about coding up his own LSM to 'knock out' winsock. When you say 'code', in what languages are you comfortable?