Internet access
To host an offline programming contest, you need conditions that:
- Ensure fairness and equal opportunities for participants.
- Prevent plagiarism and cheating.
- Support the contest rules and regulations.
Restricting internet access at the contest venue can help.
An internet ban is not always appropriate. At training or educational events, access to external resources, documentation, APIs, and tools can help participants. Internet access is also relevant to contests held entirely online.
If you need to restrict access, explain the reason and include the restriction in the rules to avoid confusion among participants.
Warning
All contests with restricted internet access must use the domains for internal users:
- int.contest.yandex.com for the new participant interface.
- official.contest.yandex.com for the classic participant interface.
Only internal users can access these contests.
The administrator interface is available only through admin.contest.yandex.ru with a Yandex ID account. The organizers responsible for the contest must therefore retain internet access.
Restrict internet access
Yandex Contest needs access to specific domains and IP addresses. Use the list below to configure the network so participants can access only the required resources.
Yandex Contest IP addresses and domains
|
Domain |
IPv4 addresses |
IPv6 addresses |
|
int.contest.yandex.ru |
87.250.251.40 |
2a02:6b8::29f |
|
clck.yandex.ru |
77.88.21.14 |
2a02:6b8::14 |
|
yastatic.net |
37.9.64.225 |
2a02:6b8:20::215 |
|
contest-problem-files.s3-private.mds.yandex.net |
87.250.251.158 |
2a02:6b8::3:158 |
|
mc.yandex.ru |
77.88.21.119 |
2a02:6b8::1:119 |
If you host a contest with restricted internet access on a subdomain other than official or int, contact Support for an up-to-date list of addresses to use for blocking.
Open the required ports
Allow outgoing HTTP and HTTPS connections to the listed resources (TCP ports 80 and 443). Also allow access to your DHCP server (UDP ports 67 and 68) and DNS servers (UDP port 53).
Block other internet access
You can restrict internet access in these ways:
-
Filter by IP address and domain name. Configure access to specific IP addresses and domain names on your network equipment or proxy server. Many routers support IP filtering. Consult the device manual or manufacturer's website for instructions. These settings are usually under Firewall, Access control, or IP filter in the router menu.
-
Use a proxy server. Configure a proxy server. If you don't have one, you can use Squid to control internet access. Set up an allowlist of domain names and configure all computers to use the proxy. Make sure participants can't disable it in their browser settings. For example, block direct internet access for all devices on your network except the proxy server.
Warning
Do not filter by domain name alone using SNI or a DNS server.
If neither method is suitable, restrict access on each participant's computer.
Prevent access through other Wi-Fi networks
If the computers have Wi-Fi adapters, prevent participants from accessing the internet through other networks, such as a phone hotspot.
- If you use a wired connection, disable the Wi-Fi adapter in Windows Device Manager.
- If devices connect through Wi-Fi and the router blocks internet access, allow them to connect only to your Wi-Fi network.
For example, on Windows, run these commands in a command prompt as an administrator:
netsh wlan add filter permission=allow ssid="YourNetwork" networktype=infrastructure
netsh wlan add filter permission=denyall networktype=infrastructure
The first command allows a connection to YourNetwork; the second hides all other networks. Replace YourNetwork with the name of your network.
To remove the filter, run:
netsh wlan delete filter permission=denyall networktype=infrastructure
netsh wlan delete filter permission=allow ssid="YourNetwork" networktype=infrastructure