Re: [gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

[John Jolet <john@jolet.net>]

On Saturday 12 November 2005 18:56, Harry Putnam wrote:
> John Jolet <john@jolet.net> writes:
> > The netgear will do it.  you can give it ip addresses to block.
> > look at the schedule setups.  set them up only to be able to access
> > the internet for, say a second on sunday at 3 am, and not for the
> > rest of the time....
>
> Do you mean to bock every address on the internet?  I'm not following
> you hear.  Further I don't see an option to block ip addresses in the
> blocking section at all.  Only by keywords.
>
> Are we looking at the same router?
> (here is it FVS318)
> I see:
>
> # Security Logs
> # Block Sites
> # Block Service
> # Add Service
> # Schedule
here.  you set a schedule, then limit certain ip addresses to access only at 
certain times...you make the time slice small enough, you've effectively 
blocked them.
> # E-mail
>
> On left
>
> (others are below but not of interest here unless you tell me
> you mean some other section)
>
>
> I see no way to block by IP number in any of those sections.  One
> could block by keyword and use `com' `net' `org' etc as the keywords I
> suppose but it seems really hackish and prone to unexpected results.
>
> No kind of control like is possible with Iptables.
no, not really, but to do that you have to put a gentoo box BETWEEN the 
netgear router and these boxes.  for http/ftp control, you could put squid 
and direct the machine's proxies to it, but you won't be able to force that.
-- 
John Jolet
Your On-Demand IT Department
512-762-0729
www.jolet.net
john@jolet.net
-- 
gentoo-user@gentoo.org mailing list