How do I block Webaccess but not email?

[lbdata]

The network is mostly Win9x machines and everyone goes out thru a router.
I would like some users to have web access and email access while I want other users to have email only.

Is there any kind of port blocking that can be done at the workstation level?

I would rather not use a 'watchdog' type software. I suppose I could remove the Lan setting under Connection in the browser, but some of the mildly technical people might figure out how to change it back.

Thanks in advance,

Wayne

 

[benzito]

I'd forget about blocking access @ the workstation level...esp. on 9x boxes as they can be easily compromised. What type of router do you have? How is your LAN configured? My first thought would be to break the LAN up into two seperate subnets, say 192.168.255.0 /25. Then enable policy to permit / deny protocols depending on the subnet.

 

[benzito]

To be more specific, "Then enable policy ON THE ROUTER to permit / deny protocols depending on the subnet."

 

[lbdata]

The router is an Ascend (Lucent) Pipeline 50 ISDN.
I'm a little familiar with Cisco 2500 models and using ACL's but I don't think the Ascend is that sophisticated. I'll have to check.
Thanks for the advice.

 

[Guest_imported]

Are you running NAT on the P50? The P50 is actually rather sophisticated. It has filters that you can configure for your type of situation. Or you can use Lucent's SecureConnect Manager to configure a firewall on the router. Check out their support website at

http://www.lucent.com/support.

Login or click on general access. Then select your product in the product index and look through the tech notes.