Home page logo
/

basics logo Security Basics mailing list archives

Re: block Internet at two workstations
From: Chris R <admin () securityindex net>
Date: 12 May 2003 00:45:29 -0000

In-Reply-To: <5.2.1.1.0.20030509135314.01c25500 () wheresmymailserver com>

Well i looked up this 'netgear FVS318', its a pretty decent box. There 
should be some sort of MAC filtering somewhere within the hardware. Add 
the MAC addresses of the two machines you want blocked and should be the 
end of it. Even the most basic of basic broadband routers have this 
feature. You should check again, if you dont see it then you could always 
do what the fella below said and remove the gateways from those 2 clients 
and apply some security policies that do not allow them to change their 
TCP/IP settings.

chris


Received: (qmail 31290 invoked from network); 9 May 2003 18:57:44 -0000
Received: from outgoing3.securityfocus.com (205.206.231.27)
 by mail.securityfocus.com with SMTP; 9 May 2003 18:57:44 -0000
Received: from lists.securityfocus.com (lists.securityfocus.com 
[205.206.231.19])
      by outgoing3.securityfocus.com (Postfix) with QMQP
      id 07333A3140; Fri,  9 May 2003 13:04:27 -0600 (MDT)
Mailing-List: contact security-basics-help () securityfocus com; run by ezmlm
Precedence: bulk
List-Id: <security-basics.list-id.securityfocus.com>
List-Post: <mailto:security-basics () securityfocus com>
List-Help: <mailto:security-basics-help () securityfocus com>
List-Unsubscribe: <mailto:security-basics-unsubscribe () securityfocus com>
List-Subscribe: <mailto:security-basics-subscribe () securityfocus com>
Delivered-To: mailing list security-basics () securityfocus com
Delivered-To: moderator for security-basics () securityfocus com
Received: (qmail 23241 invoked from network); 9 May 2003 18:33:40 -0000
Message-Id: <5.2.1.1.0.20030509135314.01c25500 () wheresmymailserver com>
X-Sender:  (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 5.2.1
Date: Fri, 09 May 2003 13:57:38 -0500
To: "Remington Winters" <fyreguy () rivetgeek com>
From: jamesworld () intelligencia com
Subject: Re: block Internet at two workstations
Cc: "Lucas Zaichkowsky" <Lucas () dnsys com>,
      "Tim Laureska" <hometeam () goeaston net>,
      "security-basics" <security-basics () securityfocus com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-OriginalArrivalTime: 09 May 2003 18:58:12.0437 (UTC) FILETIME=
[F0822850:01C3165C]

will not work

Any time you append anything except a space (which would break any URL) 
there is no match.

So....

http://
and http:// www.yahoo.com

are equal.  Both will go nowhere

http:// www.yahoo.com is different that http://www.yahoo.com


The later will get you to yahoo and the former nowhere due to the space.



At 15:11 5/7/2003, Remington Winters wrote:
Havent tested this but you might try adding a line to the host file that
says

 http:// 127.0.0.1

In theory that should direct them to their own machine for any http 
query in
a browser.  Just make sure the user doesnt have access to edit that file.
Or, you could simply remove IE....

----- Original Message -----
From: "Lucas Zaichkowsky" <Lucas () dnsys com>
To: "Tim Laureska" <hometeam () goeaston net>; "security-basics"
<security-basics () securityfocus com>
Sent: Tuesday, May 06, 2003 11:16 AM
Subject: RE: block internet at two workstations


Assuming the users know nothing about networking, simply remove the
default
gateway from those two workstations.

-Lucas


-----Original Message-----
From: Tim Laureska [mailto:hometeam () goeaston net]
Sent: Tuesday, May 06, 2003 6:01 AM
To: security-basics
Subject: block internet at two workstations


I'm working with a small (10 user network) with a netgear FVS318
firewall, accessing the internet via cable modem.. The client wants to
block internet access at two workstations.  I don't see anything
available within the firewall documentation/configuration that would
address this.  What is the best and easiest way to do this ...easy and
best may be a contradiction :-)

TIA
Tim




----------------------------------------------------------------------
----
-
FastTrain has your solution for a great CISSP Boot Camp. The 
industry's
most

recognized corporate security certification track, provides a
comprehensive
prospectus based upon the core principle concepts of security. This 
ALL
INCLUSIVE curriculum utilizes lectures, case studies and true hands-on
utilization
of pertinent security tools. For a limited time you can enter for a 
chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
----------------------------------------------------------------------
----
--

----------------------------------------------------------------------
----
-
FastTrain has your solution for a great CISSP Boot Camp. The 
industry's
most
recognized corporate security certification track, provides a
comprehensive
prospectus based upon the core principle concepts of security. This 
ALL
INCLUSIVE curriculum utilizes lectures, case studies and true hands-on
utilization
of pertinent security tools. For a limited time you can enter for a 
chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
----------------------------------------------------------------------
----
--



-------------------------------------------------------------------------
--
FastTrain has your solution for a great CISSP Boot Camp. The industry's 
most
recognized corporate security certification track, provides a 
comprehensive
prospectus based upon the core principle concepts of security. This ALL 
INCLUSIVE curriculum utilizes lectures, case studies and true hands-on 
utilization
of pertinent security tools. For a limited time you can enter for a 
chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
-------------------------------------------------------------------------
---




--------------------------------------------------------------------------
-
FastTrain has your solution for a great CISSP Boot Camp. The industry's 
most 
recognized corporate security certification track, provides a 
comprehensive 
prospectus based upon the core principle concepts of security. This ALL 
INCLUSIVE curriculum utilizes lectures, case studies and true hands-on 
utilization 
of pertinent security tools. For a limited time you can enter for a 
chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
--------------------------------------------------------------------------
--



---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]