Controlling Your Internet
Conntroll: Network Connection Control
I found an excellent little program that strictly limits all network access on a Windows 2000 or Windows XP computer. For information on Windows 95, 98/SE, ME, or other computers see my notes below.
Get the software (its only $15!)
In order to obtain the Conntroll software I will discuss in this article, click the following link:
www.winglink.com/conntroll/download.php
On this page click on the “ConnTroll vx.x.x.” link.
Two windows will pop open, one that is a poll that asks what Operating System you will be using, and one that asks what you would like to do with the file you are downloading.
Fill out the poll if you would like, but make sure to click “save” in the window that asks you what you would like to do with the program.
A window will then open asking where you would like to save the file. If you don't know what this means exactly, tell it to save it on the “desktop.”
It will take a moment for the file to download, and when it is done you may have to click “close” on the download dialog.
Installing and setting up the Software
On your desktop you will now see a little computer icon with an open box and a little cd labeled, “ct200setup.exe” Double-click this and the program will begin to install.
Click “Next” on the Welcome to Setup screen.
Click “I accept the agreement” and “Next” on the License agreement screen.
Click “Next” on the Select Location screen.
Click “Next” on the Select Start Menu Folder screen
Click “Finish”
The software is now installed and running!
You will notice a little red button in the systray at the lower right of your desktop. This is Controll's connection indicator. It should be red, and you should no longer be able to get to the internet, or any network service for that matter.
Right click the red button, and click “Log On.” You will immediately be prompted to enter a user name, and then again prompted that your user does not have a password set. This user name is not a “Windows” user, but a Conntroll user... the name “internet” should be adequate for most installations.
Next you will be asked to log in. Simply press enter, or click OK, as there is no password set yet. The Controll button in the systray should turn green and your network connection should be restored.
Now, you must set a password. To do that, right click on the Conntroll green button in the systray. Select the “Settings” option. Then in the dialog that comes up, select the “Users” tab. You will see a drop down menu that says, “Please select a user,” if you click this you will be able to select the user you just created. Next click the “Change” button in the Password section. Enter the password twice (it is best to use a combination of numbers and letters), click “OK”, then click “OK” in the Setting Dialog. You have now completed the simplest possible setup of the Conntroll software.
If you now right click on the green Controll button in the systray and click “Log off,” the button will turn red and you will no longer have internet (network) access.
What you have now is a fairly secure computer for computer illiterate persons. In order to eliminate any tampering, however, you must take another step.
Creating a Limited user account for the computer users.
Since the software was installed in an account that has administrator privileges, most 10 year olds with intermediate computer skills could figure out how to uninstall or disable the software or otherwise tamper with the settings.
In order to limit the authority of the regular user of the computer a second account must be created for general usage. [Remember that even though this account will be used for almost everything, in order to install new software (of any type) at a later date, the administrator account must be used.]
First click “Start” and then click “Control Panel” then click “User Accounts”
In this (User Accounts) dialog click “Create a new account,” next enter the account name, select “Limited” and click “Create Account.”
...don't close that User Accounts dialog, we still need it...
Securing the Administrator Account
You now need to set up a password for the administrator account so that not just anyone can use it.
Select the account that is subtitled, "Computer Administrator,"
Select “Create a password”
Enter a password (for best security, enter a different password than the one you used for the Conntroll account.)
Click “Create Password”
Choose whether you want to allow access to the administrator's files from other accounts. Usually this is just fine, and since most users have been using the administrator account for a long time, and all their files are in the administrator folders, it would be a bad idea to restrict this access.
Click “No” (unless you know why you want to do otherwise)
Now in order to use the Administrator's account you will have to know the password you just created. Remember that the password that enables internet access is not necessarily the same as this Windows Administrator password, and that any account can use the internet if the Conntroll password is entered. In short, you do not have to, nor should you, use the Administrator account to access the internet.
You computer is now set up with two accounts. The first account (often times named after the owner of the computer) is the Computer Administrator account, and now requires a password for login. You can use this account as you like, just be aware that it is not secure as concerns internet access. Then there is the new Limited Account that has no password and that any user should be able to access freely.
When a user opens the general usage account a password screen for Conntroll pops up. If the user does not know the password, he or she can simply press cancel and continue with what they need to do. When internet access is needed, the supervisor (you) can simply right click the red Conntroll button in the systray, click “Log On,” and enter the password. Remember to log off at the end of the session!
Closing Thoughts
Another thing to realize is that if you do have a local network, Conntroll completely takes your computer off the network, not just the internet. Although this is great for computers that are only connected to the internet and not to a local network, Conntroll may not be optimal for families that need to use the home network a lot (for instance for network printing). However the value of a controlled internet connection in many situations is worth the hassle.
For testing purposes I used Conntroll on my own computer. My wife's computer which is also connected to the LAN (network) was not affected, and if we were using this solution in our house, we would need to put Conntroll on both computers.
Finally, as a programmer and a web designer, I cannot imagine not having an internet connection. I simply could not do what I do without one at all hours of the day and night. When I'm not using the connection my computer is running scripts that constantly use the internet and automate many otherwise mundane tasks for me. I will have to have a locked down office when the kids get old enough to know what the internet is. Many of you will have older sons and daughters that want and need to use the internet more than you can monitor. For those cases, there is child training! ;) If you can trust a son or daughter, if you have won them to Christ and established them as brothers and sister on the path of righteousness, there will be times when evil presents itself to them, but they will be able to deal with it because of your preparation in their lives. In any case that evil will meet them whether you have controlled the internet connection or not. In regard to this last paragraph, please order Mike Pearl's “Sin No More” series. It will help you see Jesus Christ's work in the believer's life, and how it sets you (and your kids) free!
Notes on Windows 95, 98/SE, and ME: There is no robust way to control the internet connection on these operating systems because there is no real user rights management. Only 8.7% of computers on the internet use these old operating systems anyway, and my only advise is to upgrade to Windows XP or 2000, or better yet, get a Mac (Apple).
For Mac users: try this resource:
http://www.makienterprise.com/kggg/kidsgogogo.html
Advanced User Notes: Many homes now have small networks of computers that share a single internet connection. For this situation either a copy of Conntroll needs to be installed on each computer (not too great for more than five computers) or a proxy server needs to be installed on the computer that is connected directly to the internet. Several good proxy servers can be found at the following addresses:
www.wingate.com (The most popular windows proxy)
www.symantec.com/sabu/nis/npf/ (Norton Personal Firewall)
www.grok.co.uk (excellent proxy software)
www.agnitum.com (this is an excellent firewall that can be made to work as a proxy of sorts)
www.winarchives.com/server/s-_proxy.html (a list of other popular proxy software)
Other Options
Filtered internet services. I have never found a filtered internet service that I would deem useable. Many pages or sites that I need to use either have some profanity, or mention of a topic that can be obscene or germane depending on the context (eg: descriptive anatomy). There is no filtered internet that will block all pornographic content... even so called "white-list" filters often let pornographic content slip by because of the huge quantity of always changing information on the internet. A page that is safe one day may be offensive the next.
However, for those interested, here are a few lists of filtered internet providers:
www.christiantopsites.com/search/Internet_Resources/Filtered_Internet_Access/
www.internetfilterreview.com
www.filterguide.com
Blocking Pop-Ups and Spam eMail: This is an enormous issue in itself, however there are two great free products that effectively control both of these things, and make internet usage much safer with regard to viruses and other malicious content. These are the Firefox browser which includes a great pop-up blocker, and the Thunderbird eMail client which has a built in trainable spam filter.
Accountability Partners: There is yet another useful possibility provided by sites such as these:
Covenant Eyes
X3watch
Net Accountability
Basically these sites allow you to send a list of all the sites you have visited to an accountablity partner. These are extremely useful for church or business computers as you can get a log of all the sites visited regardless of who used the computer.
