General discussion


Restrict net access with pass or similar

By PaLoBo ·
Hi all,

I have a network with 50 PC all getting IP, Gateway and DNs via dhcp. The problem that I now face is that since we have an open network due to the need of some outsiders connecting to it to print and so on, I cannot restrict them from receiving an IP. I would however like to restrict them from accessing the internet. They cause excessive traffic downloading and slow down other peoples work. Is it possible to restrict internet access using a passowrd or some other method.

We have a windows small bussines server 2003.

Thanks in advance.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by adembo In reply to Restrict net access with ...

You would need to use a proxy server or create access lists in your default gateway or firewall.

Collapse -

by CG IT In reply to Restrict net access with ...

are you running ISA 2000 on your SBS 2003 box?

Collapse -

by PaLoBo In reply to

No I'm not running ISA Server on my SBS 2003 box, and my gateway points to a simple ADSL router with not many configuration options. (Budget issues...)

Collapse -

by collignond In reply to Restrict net access with ...

One option is to use a proxy server.
One that I know of that works well is squid, originally written for linux, there is a windows version. The installation that I saw was on a linux box pulling authentication info from a NDS database. I have played with it a little and it seems to be configurable for ust about any setup you could need.

Collapse -

by sgt_shultz In reply to Restrict net access with ...

one free way i can think of:
change everybody legit to static ip. (microsoft recommends this anyhow. and there are ways to do this from your chair...)
block internet access in the router to the (range of) addresses configured in dhcp...
if your router will let you assign ip address in dhcp by mac address and if it will let you do fifty plus of them you could then have some idea of the address 'guests' would get and block those...
everything you need is built into sbs. just read up on iis which is the proxy server everyone is talking about here and how to configure it...

Collapse -

by sgt_shultz In reply to

i typed iis i meant isa as bfilm said.
here maybe this will help you get started:
How To Connect Your Company to the Internet by Using an ISA Firewall with Windows Server 2003;en-us;323387

Related Discussions

Related Forums