If the router is a cheap linux PC then virtually an infinite number of 
routes can be added to their routing table. However, now you will have to 
worry about physical access to the PC allowing someone to bypass security.

You might have to put it in a locked box.

Bob Ammerman
RAm Systems

----- Original Message ----- 
From: "Patrick Murphy" <luke631@mts.net>
To: "Microcontroller discussion list - Public." <piclist@mit.edu>
Sent: Monday, June 26, 2006 5:54 PM
Subject: Re[4]: [OT]: ISP-based whitelisting service?


> Hi Bob,
>
> Monday, June 26, 2006, 4:28:30 PM, you wrote:
>
>> I am assuming that the expression "have the Internet filtered before it
>> arrives on the place" is intended to ensure that even with physical 
>> access
>> to the incoming wire from the ISP the young bucks cannot get to something
>> they shouldn't.
>
> Yes, that is what is intended.
>
>> I believe the solution I outlined before can handle this, with the 
>> following
>> simple notes:
>
>> 1) Access from the router to the ISP requires knowledge of the ISP 
>> password,
>> which would only be stored in the Router and unknown to anyone in the
>> Colony.
>
> Okay...
>
>> 2) Access to the router setup is protected by the router's own password,
>> which would not be known by anyone at the Colony either.
>
> Okay...
>
>> Thus to get to the internet you have to go through the router, and the
>> router does all the filtering for you.
>
> Sounds like I'll have to learn more about routers. Like how many sites
> can be added to their whitelist, and just what can and can't be done
> with them.
>
>> The only way I can see to get around this is to get another account with 
>> the
>> same ISP and use it on the same physical connection.
>
> Sounds like a reasonably remote possibility - if they can do this, they 
> will
> probably set up their own, secret connection instead.
>
>> Bob Ammerman
>> RAm Systems
>
> Thanks for your help. I've now got a better and more focused
> understanding of our options!
>
> -- 
> Best regards,
> Patrick Murphy
> James Valley Colony
> -- 
> http://www.piclist.com PIC/SX FAQ & list archive
> View/change your membership options at
> http://mailman.mit.edu/mailman/listinfo/piclist 

-- 
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist