RE: block internet at two workstations

[Kevin Saenz <ksaenz () spinaweb com au>]

Ok how do you expect to do name resolution on the LAN with DNS removed?
default route is a good idea but I think DNS is an overkill. Regardless
if you don't have default routes and you have DNS the machine know's how
to resolve but just doesn't know how to get there.

I Just hope the users are not smart enough to add default routes or DNS
:)

> Two quickest and easiest ways?
>
> Remove DNS and default gateway from the two boxes.
>
> This way those machines cannot access the internet because they cannot
> route.
>
> -Kit
>
> -----Original Message-----
> From: Tim Laureska [mailto:hometeam () goeaston net] 
> Sent: Tuesday, May 06, 2003 4:01 AM
> To: security-basics
> Subject: block internet at two workstations
>
>
> I'm working with a small (10 user network) with a netgear FVS318
> firewall, accessing the internet via cable modem.. The client wants to
> block internet access at two workstations.  I don't see anything
> available within the firewall documentation/configuration that would
> address this.  What is the best and easiest way to do this ...easy and
> best may be a contradiction :-)
>  
> TIA
> Tim
>
>
>
>
> ------------------------------------------------------------------------
> ---
> FastTrain has your solution for a great CISSP Boot Camp. The industry's
> most 
> recognized corporate security certification track, provides a
> comprehensive 
> prospectus based upon the core principle concepts of security. This ALL
> INCLUSIVE curriculum utilizes lectures, case studies and true hands-on
> utilization 
> of pertinent security tools. For a limited time you can enter for a
> chance 
> to win one of the latest technological innovations, the SEGWAY HT. 
> Log onto http://www.securityfocus.com/FastTrain-security-basics
> ------------------------------------------------------------------------
> ----
>
>
> ---------------------------------------------------------------------------
> FastTrain has your solution for a great CISSP Boot Camp. The industry's most
> recognized corporate security certification track, provides a comprehensive
> prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
> studies and true hands-on utilization
> of pertinent security tools. For a limited time you can enter for a chance
> to win one of the latest technological innovations, the SEGWAY HT.
> Log onto http://www.securityfocus.com/FastTrain-security-basics
> ----------------------------------------------------------------------------
-- 
Regards,

Kevin Saenz
 
Spinaweb
Your one stop shop for I.T solutions.
 
Ph: 02 4620 5130
Fax: 02 4625 9243
Mobile: 0418455661
Web: http://www.spinaweb.com.au


---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most 
recognized corporate security certification track, provides a comprehensive 
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization 
of pertinent security tools. For a limited time you can enter for a chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
----------------------------------------------------------------------------