RE: block internet at two workstations

["Naman Latif" <naman.latif () inamed com>]

Setup Static IP reservations in DHCP Server for the Two WorkStations
(based on their MAC address). 
Then block these two IP's at your Firewall \ Internet Router. You won't
have to "configure" anything on the workstations.

Regards \\ Naman


> -----Original Message-----
> From: Tim Laureska [mailto:hometeam () goeaston net] 
> Sent: Tuesday, May 06, 2003 11:39 AM
> To: 'Mark Kelsay'
> Cc: security-basics
> Subject: RE: block internet at two workstations
>
>
> I hope this isn't a repeat message... my outlook is acting up...
>
> Yeah, the netgear box is set up for DHCP... If I set static 
> IPs, I don't want a smart network user to be able to reset 
> the default gateway
>
> My ISP guys said:
> Most routers will allow you to filter by Mac address. i.e. 
> Use winipcfg or ipconfig to get the Mac address of the 
> network card in the work stations you wish to block. Then add 
> them into the filtered list. This will allow them the freedom 
> of the inside network but will not be able to surf outside.
>
> That sounds good.  Not sure if the netgear FVS 318 will do that though
>
> -----Original Message-----
> From: Mark Kelsay [mailto:MKelsay () switchboard com] 
> Sent: Tuesday, May 06, 2003 2:17 PM
> To: 'Tim Laureska'
> Subject: RE: block internet at two workstations
>
> Oh its there.  I would think the netgear is dolling out dhcp 
> info to the workstations.  setup the workstations in question 
> with static settings and omit the default gateway entry.
>
>
> Mark
>
> -----Original Message-----
> From: Tim Laureska [mailto:hometeam () goeaston net]
> Sent: Tuesday, May 06, 2003 2:27 PM
> To: 'Mark Kelsay'
> Subject: RE: block internet at two workstations
>
>
> With the ISP I'm using and the netgear FVS 318 box, I don't 
> need a default gateway entered at all on the stations
>
> -----Original Message-----
> From: Mark Kelsay [mailto:MKelsay () switchboard com] 
> Sent: Tuesday, May 06, 2003 2:10 PM
> To: 'Tim Laureska'
> Subject: RE: block internet at two workstations
>
> remove the default gateway entry on the workstations TCP/IP settings.
>
>
> Mark
>
> -----Original Message-----
> From: Tim Laureska [mailto:hometeam () goeaston net]
> Sent: Tuesday, May 06, 2003 7:01 AM
> To: security-basics
> Subject: block internet at two workstations
>
>
> I'm working with a small (10 user network) with a netgear 
> FVS318 firewall, accessing the internet via cable modem.. The 
> client wants to block internet access at two workstations.  I 
> don't see anything available within the firewall 
> documentation/configuration that would address this.  What is 
> the best and easiest way to do this ...easy and best may be a 
> contradiction :-)
>  
> TIA
> Tim
>
>
>
>
> --------------------------------------------------------------
> ----------
> ---
> FastTrain has your solution for a great CISSP Boot Camp. The 
> industry's most
>
> recognized corporate security certification track, provides a 
> comprehensive 
> prospectus based upon the core principle concepts of 
> security. This ALL INCLUSIVE curriculum utilizes lectures, 
> case studies and true hands-on utilization 
> of pertinent security tools. For a limited time you can enter 
> for a chance 
> to win one of the latest technological innovations, the SEGWAY HT. 
> Log onto http://www.securityfocus.com/FastTrain-security-basics 
> --------------------------------------------------------------
> ----------
> ----
>
>
>
>
>
>
> --------------------------------------------------------------
> -------------
> FastTrain has your solution for a great CISSP Boot Camp. The 
> industry's most 
> recognized corporate security certification track, provides a 
> comprehensive 
> prospectus based upon the core principle concepts of 
> security. This ALL INCLUSIVE curriculum utilizes lectures, 
> case studies and true hands-on utilization 
> of pertinent security tools. For a limited time you can enter 
> for a chance 
> to win one of the latest technological innovations, the SEGWAY HT. 
> Log onto http://www.securityfocus.com/FastTrain-security-basics 
> --------------------------------------------------------------
> --------------

---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most
recognized corporate security certification track, provides a comprehensive
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization
of pertinent security tools. For a limited time you can enter for a chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
----------------------------------------------------------------------------