Question about Routers and blocking net access..

[BaLa]

My friend is about to get DSL, since I'm the computer guy I will "build him a small network"
I plan on using the Linksys BEFSR41 v2 router.
He will get DSL (PPoE I believe) Earthlink through Sprint..

the network will have 2 computer..
1 K6-2 500 3xx? RAM Netgear NIC
and another comp specs to be determined with probaply another Netgear or linksys NIC

is there a way you could block one of the comps from accessing the internet through the router?
(BEFSR41.)
I'm about to search the Linksys Website..

tia
TC

[nagetech]

I have that smae router and just went through the settings..im not sure whether or not i can be done through the router...BUT..being a NT/2k Admin...... there are a few tricks


one..u can just hot wire the pc with false IP info for the gateway so that it can access ur network..but not the net

or if you dont wanan do that, give internet explorer some false info for a proxy that dont exist..making it time out every time

those are 2 ideas ....anyone agree/disagree?

[Bouncer]

Used fixed IPs for the machines on the network, no DHCP. Block port 80 for the address of the machine you do not want to access the web.

Regards,
-Bouncer-

[nagetech]

or that..take ur pick.......

[BaLa]

cool..
thanks Bouncer...

nagetech - both your solutions work as well...

but with other one can be set/unset without physical access to the comp.

oh BTW..

how does DHCP work?

on my router (Linksys BEFSR41) all my computers ALWAYS get the same IP add..
I was under the impression it assigned ip address in order of the comps turning on/hitting the network...?

[nagetech]

Most of the time with DHCP...itll remember the NIC"s MAC addy, and just reassign it that ip

the BEFSR41 has a DHCP table..unless u flush it...this will always occur

[BaLa]

ok..
I was just wondering anyways..
really makes no diff.. to me...

thanks..

[twwabw]

Actually, the little Linky has several ways to block internet access for specific machines, providing you're using newer firmware. First, there is IP range filtering, which allows you to block a range of internal IP's from having internet access.

2nd, is Private MAC filtering. This one is foolproof. Enter the pc's MAC address into the box, and voila! No internet access. A savvy user could easily by-pass the range filtering, or port 80 blocking, by assigning themselves a fixed IP. But, they'll have a hard time bypassing their NIC's MAC address!!