Block internet with Efficient Networks 5851? 1

[schase]

I am pretty certain this can be done with IPTables, but I really have limited experience with them.

Friend wants to block workstations from accessing the network, only allowing LAN traffic and one particuliar IP (maybe port also) outside of their LAN.

With the exception of a few workstations - the large majority want to be blocked.

Anyone have any suggestions on how to do this? I've read up on the Efficient stuff, but like I said it's over my area of knowledge.

"Ever stop to think, and forget to start again?"

Stuart
A+, Net+, Security+

 

[plshlpme]

don't give those workstations a default gateway

 

[schase]

Thanks, but that wouldnt work where they need to access one IP address out side of the network

"Ever stop to think, and forget to start again?"

Stuart
A+, Net+, Security+

 

[plshlpme]

have you looked at this page?

http://www.dslreports.com/faq/eff/9 5851/5861/5871

there is usually quite a bit of info there

 

[schase]

havnt found it yet, but looks like it's got some other useful stuff there.

"Ever stop to think, and forget to start again?"

Stuart
A+, Net+, Security+