[gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

[Harry Putnam <reader@newsguy.com>]

John Jolet <john@jolet.net> writes:

> On Saturday 12 November 2005 18:56, Harry Putnam wrote:
>> John Jolet <john@jolet.net> writes:
>> > The netgear will do it.  you can give it ip addresses to block.
>> > look at the schedule setups.  set them up only to be able to access
>> > the internet for, say a second on sunday at 3 am, and not for the
>> > rest of the time....
>>
>> Do you mean to bock every address on the internet?  I'm not following
>> you hear.  Further I don't see an option to block ip addresses in the
>> blocking section at all.  Only by keywords.
>>
>> Are we looking at the same router?
>> (here is it FVS318)
>> I see:
>>
>> # Security Logs
>> # Block Sites
>> # Block Service
>> # Add Service
>> # Schedule
> here.  you set a schedule, then limit certain ip addresses to access only at 
> certain times...you make the time slice small enough, you've effectively 
> blocked them.
>> # E-mail


Willie Wong <wwong@Princeton.EDU> writes:


>> # Block Service
>
> This is the one. Block service allow you to specify which LOCAL ip
> addresses you want to limit the service for. 
>
> Just set up static ip for machines 3-5 (or DHCP with fixed ip
> addresses for those machines based on hardware address). Set the
> blocking schedule to always. For ALL services you find in the list,
> supply the ips for those three machines. 

Apparently you too are not looking at the router I've specified:
NETGEAR FVS318

In the schedule section there is only one place to put an IP address
and that is for an ntp server if you want one.

http://home.jtan.com/~reader/exp/web_ready/dispimg.cgi

-- 
gentoo-user@gentoo.org mailing list