D-Link DSL504 (how to block specific IP internet access)

Hi,

I have a network in the house, with a wireless USB. The wireless routes
across a Windows XP pc which mini ports the connection to the LAN. The
router on the LAN (D-Link DSL504) allows this PC internet access.



How Can I stop this? The person who connects through the wireless has his
own broadband connection, I need to make the DSL 504 refuse connection to
the net, but not the LAN.


Any ideas?


Shane.

"Shane Mallia" <(E-Mail Removed)> wrote in message
news:bnhdqd$hbk$(E-Mail Removed)...
> Hi,
>
> I have a network in the house, with a wireless USB. The wireless
routes
> across a Windows XP pc which mini ports the connection to the LAN. The
> router on the LAN (D-Link DSL504) allows this PC internet access.
>
>
>
> How Can I stop this? The person who connects through the wireless has his
> own broadband connection, I need to make the DSL 504 refuse connection to
> the net, but not the LAN.
>
>
> Any ideas?
>
What other than the obvious one of sharing the one connection and saving
some money.

Has he got general access to your LAN or is it to a specific machine,
Your best best bet may be doing something with subnets .

A better description of the topo of the LAN and what they need to connect to
may help.

Ian

> A better description of the topo of the LAN and what they need to connect
to
> may help.
>
> Ian


Ok Sure...

So I have a LAN with 6 PC's connected to a DSL 504 router modem. On one of
the PC's we have a intel Anypoint home rf lan (old, and rubbish), and this
is displayed to windows as a LAN connection. So I merged the two connection
accross, so the one person connecting on the wireless anypoint will have
full acess to the network, but it seems that the router has also granted him
access to the internet as well.

I would like to stop him being granted access to the internet, but still
allow him access to the home lan (can play multiplayer games and the likes).

How would I do this with the subnet mask? I haven't got a clue


Shane.

On 26/10/03 10:55 pm, in article
bnhjpd$10a1it$(E-Mail Removed), "cyber-co"
<(E-Mail Removed)> wrote:

>
> "Shane Mallia" <(E-Mail Removed)> wrote in message
> news:bnhdqd$hbk$(E-Mail Removed)...
>> Hi,
>>
>> I have a network in the house, with a wireless USB. The wireless
> routes
>> across a Windows XP pc which mini ports the connection to the LAN. The
>> router on the LAN (D-Link DSL504) allows this PC internet access.
>>
>>
>>
>> How Can I stop this? The person who connects through the wireless has his
>> own broadband connection, I need to make the DSL 504 refuse connection to
>> the net, but not the LAN.
>>
>>
>> Any ideas?
>>
> What other than the obvious one of sharing the one connection and saving
> some money.
>
> Has he got general access to your LAN or is it to a specific machine,
> Your best best bet may be doing something with subnets .
>
> A better description of the topo of the LAN and what they need to connect to
> may help.
>
How about stopping ICS - only allow the incoming traffic to route around the
LAN, but not to access the internet connection.

> Hi,
>
> I have a network in the house, with a wireless USB. The wireless
routes
> across a Windows XP pc which mini ports the connection to the LAN. The
> router on the LAN (D-Link DSL504) allows this PC internet access.
>
>
>
> How Can I stop this? The person who connects through the wireless has his
> own broadband connection, I need to make the DSL 504 refuse connection to
> the net, but not the LAN.
>

just a thought, unclick "share this internet connection" on the actual
network tab for the connection in question ?

> How about stopping ICS - only allow the incoming traffic to route around
the
> LAN, but not to access the internet connection.


Because ICS is not enabled, the PC that is bridging the connection merges
the LAN with the wireless, therefore when the PC wants to access the
internet the router (on the LAN) grants it access, which I don't want. I am
sure its a router specific option. What if you had hundreds of PC connected,
and u only wanted certain ones connected to the internet?


Shane.

In article <bnmt27$rhi$(E-Mail Removed)>, Shane Mallia
<(E-Mail Removed)> writes
>
>> How about stopping ICS - only allow the incoming traffic to route around
>the
>> LAN, but not to access the internet connection.
>
>
>Because ICS is not enabled, the PC that is bridging the connection merges
>the LAN with the wireless, therefore when the PC wants to access the
>internet the router (on the LAN) grants it access, which I don't want. I am
>sure its a router specific option. What if you had hundreds of PC connected,
>and u only wanted certain ones connected to the internet?

The "gateway" will be set to your router. If the gateway on his machine
is set to his router (you say he has his own broadband connection) then
he won't use your ADSL connection.

If it's all set up with DHCP, you better assign him a static address on
your LAN instead. You can then also set a firewall rule on the router to
block all traffic from his IP address.
--
David Mahon
Due to the recent virus attacks, please email any
replies to newsreply_01 AT amigo.co.uk