Home page logo
/

basics logo Security Basics mailing list archives

Re: FW: block internet at two workstations
From: "Lee Burleson" <lburleso () hotmail com>
Date: Wed, 07 May 2003 10:43:36 -0500

That was a good suggestion, IMO.

If the security is set up properly on the workstations, the users should not have permissions to modify the default gateway or set static routes.

However if, for some reason, you have a proxy server that is on the local network, the user would still be able to point the browser at it and be home free. To solve this, you would set permanant static routes that nullify that kind of access. Again, user privliges will not allow modification of your changes.

Heck, if you don't have local resources that the machines need to access, you could just disable the NIC! Or even remove it!

- Lee


> -----Original Message-----
> From: Lucas Zaichkowsky [mailto:Lucas () dnsys com]
> Sent: Tuesday, May 06, 2003 13:16
> To: Tim Laureska; security-basics
> Subject: RE: block internet at two workstations
>
>
> Assuming the users know nothing about networking, simply
> remove the default
> gateway from those two workstations.
>
> -Lucas
>
>
> -----Original Message-----
> From: Tim Laureska [mailto:hometeam () goeaston net]
> Sent: Tuesday, May 06, 2003 6:01 AM
> To: security-basics
> Subject: block internet at two workstations
>
>
> I'm working with a small (10 user network) with a netgear FVS318
> firewall, accessing the internet via cable modem.. The client wants to
> block internet access at two workstations.  I don't see anything
> available within the firewall documentation/configuration that would
> address this.  What is the best and easiest way to do this ...easy and
> best may be a contradiction :-)
>
> TIA
> Tim

_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail


---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most recognized corporate security certification track, provides a comprehensive prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case studies and true hands-on utilization of pertinent security tools. For a limited time you can enter for a chance to win one of the latest technological innovations, the SEGWAY HT. Log onto http://www.securityfocus.com/FastTrain-security-basics ----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]