How can I block a website in a way that isn't easily reversible, or requires a password to reverse?

A friend asked me to block a website on his computer, and not tell him how I did it. He knows about the hosts file, and ends up just unblocking the site himself if it's blocked from the hosts file.

Is there a simple way to block a website that my friend (who is average as far as tech literacy goes) won't be able to easily reverse? I'd prefer not to install invasive child-monitoring software if possible. I believe he's running Windows 7.

Edit: He's a student, and is on-campus pretty often. I think he has control over his home network, but just blocking it on his home network will only be mildly helpful.

Matthew

Posted 2013-01-30T15:34:06.580

Reputation: 11 686

is this blocking facebook for him? Because i did this pretty much every semester in school hahaha – im so confused – 2013-01-30T15:54:36.010

@AK4749: No, but you're close :P It's not an embarrassing website, I just prefer to give as few details as possible when it's someone else's privacy. – Matthew – 2013-01-30T15:55:37.067

hahaha of course, I completely understand. just assumed from my previous experience lol (also had to block imgur and reddit lmao) – im so confused – 2013-01-30T15:57:14.727

Assuming your friend has physical access to his own computer, whatever you come up with will be reversible. I'm not sure polling for ideas your friend won't think of is a good fit for this site, but let me throw in a suggestion on a helpful note: route add -p [website IP] mask 255.255.255.255 1.1.1.1 metric 1 if 1. – Marcks Thomas – 2013-01-30T16:30:32.517

Answers

Install K9 Web Protection from BlueCoat and set it to block whichever site you want.

Since this program is installed on the machine, you don't have to worry about networks and the like, it's a device based filter, and believe me it cannot be removed without the master password.

So set a long and secure password, and use your email address to register the license and installing the software.

Stay safe

user181734

Posted 2013-01-30T15:34:06.580

Reputation:

Are you saying that you can't uninstall the program without a password? If so, I would not trust the app! – Dave – 2014-01-30T10:20:39.130

You could always block the site on the router itself. This process will vary depending on which router you have, but assuming you have a LinkSys/Cisco router (which seems to be a standard company people go with), look for something like:

Access Restrictions

Kruug

Posted 2013-01-30T15:34:06.580

Reputation: 5 078

Great suggestion, but he's a student (often on-campus), so I'm trying to find something that follows his laptop, rather than only working at home. – Matthew – 2013-01-30T15:54:26.117

@Matthew As far as on-device blocking, I believe that the HOSTS file and third party software would be your only option – Kruug – 2013-01-30T15:56:28.593

OpenDNS has the ability to block individual domains: up to 25 of them with the free account

From their help: OpenDNS provides Web content filtering at the individual domain level, which enables administrators to Always Block (adds domain to the blacklist) or Never Block (adds domain to the whitelist) the Internet domains that you specify. When you manage domains directly, these settings override any specified through category filtering.

SeanC

Posted 2013-01-30T15:34:06.580

Reputation: 3 439

Is OpenDNS something that I set up on his computer, or on his network? I.e., will it follow his laptop to school? – Matthew – 2013-01-30T15:57:16.347

you will actually alter the DNS settings of his connection. setting them to the OpenDNS servers will get that part set up, and creating an account will let you set up the filtering. If he needs the block at multiple locations, then OpenDNS may not be suitable, as to protect more than 1 network you need a paid account – SeanC – 2013-01-30T16:00:46.137

OpenDNS also has an updater that makes sure everything is running smooth. This allows you to connect the account to the required filtering you want. Of course this application can also be closed I suppose. – Ramhound – 2013-01-30T16:10:51.683

I guess your best bet for on-device blocking might be a firewall app that provides parental controls, so you can lock its settings and prevent unauthorised modification of the site block rules you've set up.

For example, Comodo (not an endorsement of a specific app since I've never used it):

Of course, if he has admin access to his laptop there's no real way to prevent him from disabling/uninstalling the app.

Karan

Posted 2013-01-30T15:34:06.580

Reputation: 51 857

Long story short if he has physical access to the computer there isn't anything you can do to prevent him from getting access to anything he wants. It's one of those rules of computer security.

"Law #3: If someone has unrestricted physical access to your computer, it's not your computer anymore".

Mike

Posted 2013-01-30T15:34:06.580

Reputation: 111

Sure, but I'm not dealing with Kevin Mitnick here. He just wants it difficult enough to enable his self-control. – Matthew – 2013-01-31T03:16:22.420