[gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-20 Thread Harry Putnam
A. Khattri [EMAIL PROTECTED] writes: But preventing updates (espec. if they're Windoze boxes) seems like a bad idea to me. It can be done by running IE thru a proxy on my linux box. Then it only sees local address. -- gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Willie Wong
On Sun, Nov 13, 2005 at 01:09:54AM -0600, Harry Putnam wrote: Apparently you too are not looking at the router I've specified: NETGEAR FVS318 In the schedule section there is only one place to put an IP address and that is for an ntp server if you want one. Apparently you didn't RTFM. (Of

Re: [gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Holly Bostick
Harry Putnam schreef: Apparently you too are not looking at the router I've specified: NETGEAR FVS318 Not to mix in (not having a Netgear router), but I wonder if perhaps the reason you are not seeing the ability to block IPs (which several people have said exists) is because you have not

[gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Harry Putnam
Willie Wong [EMAIL PROTECTED] writes: Apparently you didn't RTFM. (Of course, since you didn't read my comment either. I said: Click on BLOCK SERVICES and you clicked on Schedule, well no shit Sherlock, of course what I told you won't be there.) Here: I found it for you:

[gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Harry Putnam
Willie Wong wrote: Poorly written, but understandable. Of course, that is for firmware version 1.4, which has been out since January 2004, hopefully I am not making an undue assumption that your router has the most up-to-date firmware. You've got an earlier firmware. The latest is 2.4 also

Re: [gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Willie Wong
On Sun, Nov 13, 2005 at 11:44:31AM -0600, Harry Putnam wrote: You have a fast smart mouth on you Mr. Wong. But thanks just the same. I got in my head you both were talking about the scheduling area. My mistake. I noticed it soon after posting and found the place to make these settings

[gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Harry Putnam
Willie Wong wrote: =) Willie is fine. Mr. Wong doesn't become me. Willie it is then... There is a problem with it I'll explain in a minute but first let me ask if you are actually using your router to do something similar to what I described? [snip] reasoning about blocking only services

Re: [gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Willie Wong
On Sun, Nov 13, 2005 at 03:13:35PM -0600, Harry Putnam wrote: big big big snip of things I can't answer for you I'm wondering now if there is a way to do something like setup a squid proxy on the gentoo and somehow force any attemts to go online from the 3 isolated mchs, toward it? Two ways

[gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Harry Putnam
Willie Wong [EMAIL PROTECTED] writes: Two ways exist (AFAIK) of using squid: 1) Run it as a proxy server. In the Internet Options for your web browser, you point the proxy toward the proxy server. You submit a request, it gets relayed to the internet, the response comes back, squid

Re: [gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-13 Thread Willie Wong
On Sun, Nov 13, 2005 at 05:35:27PM -0600, Harry Putnam wrote: In the different scenarios we've been discussing though, I'm thinking I've blocked internet access for several machines. If those machines are then set to proxy thru a local lan address (The gentoo box running squid). They would

[gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-12 Thread Harry Putnam
John Jolet [EMAIL PROTECTED] writes: The netgear will do it. you can give it ip addresses to block. look at the schedule setups. set them up only to be able to access the internet for, say a second on sunday at 3 am, and not for the rest of the time Do you mean to bock every address on

Re: [gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-12 Thread Willie Wong
On Sat, Nov 12, 2005 at 06:56:46PM -0600, Harry Putnam wrote: Do you mean to bock every address on the internet? I'm not following you hear. Further I don't see an option to block ip addresses in the blocking section at all. Only by keywords. Yes, the netgear will do it. My crappy netgear

[gentoo-user] Re: [Iptables related] How to make one machine only talk on loc lan

2005-11-12 Thread Harry Putnam
John Jolet [EMAIL PROTECTED] writes: On Saturday 12 November 2005 18:56, Harry Putnam wrote: John Jolet [EMAIL PROTECTED] writes: The netgear will do it. you can give it ip addresses to block. look at the schedule setups. set them up only to be able to access the internet for, say a