Masquerading

Hi,

can someone help me and tell me how to prevent a group of PCs from
accessing the internet?

I am using RD8 IPTABLES Masquerading, and would like to prevent IPs
from 10.1.5.1 to 10.1.5.50, subnet 255.0.0.0 from accessing the WWW.

Thanks alot.

Ali Rafeek

"Ali Rafeek" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> Hi,
>
> can someone help me and tell me how to prevent a group of PCs from
> accessing the internet?
>
> I am using RD8 IPTABLES Masquerading, and would like to prevent IPs
> from 10.1.5.1 to 10.1.5.50, subnet 255.0.0.0 from accessing the WWW.


The specified netmask covers all hosts in the 10.x.x.x network from 10.0.0.0
to 10.255.255.255.

Your host range does not fit any binary subnet cleanly, so if it's not
allowed to block the whole range from 10.1.5.0 to 10.1.5.63, you have to
make it in pieces:
- allow 10.1.5.0
- reject 10.1.5.0 to 10.1.5.31
- reject 10.1.5.32 to 10.1.5.47
- reject 10.1.5.48 to 10.1.5.49
- reject 10.1.5.50

You have also think whether *all* Internet connectivity is to be rejected,
or connections to port 80 (and maybe secure HTTP and proxy ports).

HTH

Tauno Voipio
tauno voipio @ iki fi