Deny access to Internet

[jlany]

Running a small network here, with five boxes sharing ADSL connection. I need to deny access to the Net on one box. How do I do this?
The network is behind a firewall box running Red Hat 7.2. TIA!

[Gaccm]

you could setup your gateway machine (you didn't say much about your network, so i'm assuming you are using a linux box as a gateway) to reject all packets from that that computer. This would all be done with your firewall, most older setups use ipchains for firewalls, while most new ones who iptables.
So first test which of those you have (in console as root type iptables, if you get an error, you don't have it. same with ipchains)

[jlany]

Originally posted by Gaccm:
<STRONG>you could setup your gateway machine (you didn't say much about your network, so i'm assuming you are using a linux box as a gateway) to reject all packets from that that computer. This would all be done with your firewall, most older setups use ipchains for firewalls, while most new ones who iptables.
So first test which of those you have (in console as root type iptables, if you get an error, you don't have it. same with ipchains)</STRONG>

Sorry if I was too brief. What I am actually looking for is the correct rule for 'iptables' to deny the one box from having access to the Net. TIA.

[jumpedintothefire]

$IPTABLES -A FORWARD -i $INTIF -s xxx.xxx.xxx.xxx -j DROP

This must come before the forward rule that allows the connection.

[jlany]

Originally posted by jumpedintothefire:
<STRONG>$IPTABLES -A FORWARD -i $INTIF -s xxx.xxx.xxx.xxx -j DROP

This must come before the forward rule that allows the connection.</STRONG>

Thanks for the response. It works like a charm.

:)

[jumpedintothefire]

Your Welcome