RE: block internet at two workstations

["Nina V. Levitin" <Nina.Levitin () integtech com>]

If you have 10 workstation on the LAN you don't need DNS locally.
Windows will discover all the workstation via NetBIOS.  If all else
fails you can do host files.

-Kit



-----Original Message-----
From: Kevin Saenz [mailto:ksaenz () spinaweb com au] 
Sent: Wednesday, May 07, 2003 2:26 PM
To: Nina V. Levitin
Cc: Tim Laureska; security-basics
Subject: RE: block internet at two workstations


Ok how do you expect to do name resolution on the LAN with DNS removed?
default route is a good idea but I think DNS is an overkill. Regardless
if you don't have default routes and you have DNS the machine know's how
to resolve but just doesn't know how to get there.

I Just hope the users are not smart enough to add default routes or DNS
:)

> Two quickest and easiest ways?
>
> Remove DNS and default gateway from the two boxes.
>
> This way those machines cannot access the internet because they cannot

> route.
>
> -Kit
>
> -----Original Message-----
> From: Tim Laureska [mailto:hometeam () goeaston net]
> Sent: Tuesday, May 06, 2003 4:01 AM
> To: security-basics
> Subject: block internet at two workstations
>
>
> I'm working with a small (10 user network) with a netgear FVS318 
> firewall, accessing the internet via cable modem.. The client wants to

> block internet access at two workstations.  I don't see anything 
> available within the firewall documentation/configuration that would 
> address this.  What is the best and easiest way to do this ...easy and

> best may be a contradiction :-)
>  
> TIA
> Tim
>
>
>
>
> ----------------------------------------------------------------------
> --
> ---
> FastTrain has your solution for a great CISSP Boot Camp. The
industry's
> most 
> recognized corporate security certification track, provides a
> comprehensive 
> prospectus based upon the core principle concepts of security. This
ALL
> INCLUSIVE curriculum utilizes lectures, case studies and true hands-on
> utilization 
> of pertinent security tools. For a limited time you can enter for a
> chance 
> to win one of the latest technological innovations, the SEGWAY HT. 
> Log onto http://www.securityfocus.com/FastTrain-security-basics
------------------------------------------------------------------------
> ----
>
>
> ----------------------------------------------------------------------
> -----
> FastTrain has your solution for a great CISSP Boot Camp. The
industry's most
> recognized corporate security certification track, provides a
comprehensive
> prospectus based upon the core principle concepts of security. This
ALL INCLUSIVE curriculum utilizes lectures, case studies and true
hands-on utilization
> of pertinent security tools. For a limited time you can enter for a
chance
> to win one of the latest technological innovations, the SEGWAY HT.
> Log onto http://www.securityfocus.com/FastTrain-security-basics
------------------------------------------------------------------------
----
-- 
Regards,

Kevin Saenz
 
Spinaweb
Your one stop shop for I.T solutions.
 
Ph: 02 4620 5130
Fax: 02 4625 9243
Mobile: 0418455661
Web: http://www.spinaweb.com.au


---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most
recognized corporate security certification track, provides a comprehensive
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization
of pertinent security tools. For a limited time you can enter for a chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
----------------------------------------------------------------------------