Windows Forum

Ask something
Discussion Locked

internet connection sharing

0 helpful
10 replies

by adrehman

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have enabled internet access on me windows 2000 server for my all workstation by internet connection sharing options in dialup connection.

How can I block internet access for unwanted IP like I don?t want to give access to all my LAN users I just want to give Access to some of my assign IPs.

I try to find something to manage that but I couldn?t find any thing and in reaction of that my whole staff is using inter net freely.

This is Adrehman
From ZRG international
Karachi, Pakistan

10 replies

by oakc

I would suggest that you use a firewall that works with ICS: for example ZoneAlarm is a freely downloadable firewall and we have found it very effective. It can be configured to a large extent but you may need to buy ZoneAlarm Pro for advanced features such as blocking of specific IP addresses.

by saihib

If you're running Active Directory you can use group policies to restrict Web access. But if you want to block specific IP addresses you'll need some type of proxy server or a product like Websense or a router that can be configured to block IP addresses.

by billc124

Just don't enter a default gateway in the TCP/IP settings. If you do that, they should not be able to get on the Internet.

by junething

If i understand u're problem, u have one static IP address from ISP and u have win2k server and windows pro/win98/win95 computers. You have used the ICS (Internet Connection Sharing) feature that comes with win2k??? Also I'm assuing that your haveyour client computers, (winpro/win98.win95)'s TCP/IP properties to "obtain IP automatically". Also, u want lets say only the Winpro machine to access internet, but not win98 or win95???

If thats correct, then u should not have used the ICS, rather should have used the DHCP to configure the IP subnetmask!!! What ICS is very nonconfigurabel, but easy version of DHCP, thus everyone in your LAN can access internet using the DHCP client protocol.

Answers to u're problem are:
1. go to each client computer such as winpro/win98/win95 can assign a stictic IP address, subnet mask, gateway, etc and for computers u don't want to give internet access, leave off the gateway address and DNS address.

2. go to DHCP MMC, authorized it (if u're in AD domain) and assgin Private IP address, such as 192.168.0.1-192.168.1.255 with subnet mask of 255.255.255.0. If u want to prevent some computers from accessing internet, then u need to divide the IP address range and create custom subnetmask, (try www.learntosubnet.com for more info).

by junething

btw, not an LAN admin, but I kinda think its a good idea to let the office worker play with the internet. If u're boss or u don't want them to use internet during working hours, use Group policies. And thats another topic.... So don't be a jerk, let them have some fun.

This discussion is closed to new replies.