firewall on the same segment

["Fernando Serto" <fernando.serto () memetrics com>]

hi,

I always installed firewalls to prevent access from internet to the internal
network, or from one network to another, but I was asked to install a
firewall ON the LAN, to deny access to a few boxes. for example, the network
address is 192.168.100.0/24, firewall's ip is 192.168.100.1 and I need to
block access to a specific server which ip is 192.168.100.3. I have to allow
access only to a few users to this server. Is it possible to deploy using
iptables? On this company, they're using fwbuilder to administer the
firewall, I tried to block access from 192.168.100.4 to 192.168.100.3, but I
couldn't... I can only deny access to the ips configured in the firewall.

Thanks in advance.

Cheers,
Fernando



---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 1/08/2003


---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------