block local user to access a site
 

one of my local net colleagues just disrespect me. and since i have the computer which is used as a gateway to linux, and i know the root password, and i told the guy from my local net the respective ip address, now i just want to block it.
i believe it would be something like: block 192.168.0.28 88.231......
if this doesn't brake your moral code, then i need your help. thx in advance.

If you want to stop him accessing a specific site then you'll need to know the IP address of the site in question, then you'll need to drop everything/deny everything that's comming from his PC destined for the site in question. You'll need to use IPTables to do this. Take a look at the http://www.tldp.org/HOWTO/Firewall-HOWTO.html for some general IP filtering stuff.

I would be tempted to just talk to him about his 'disrespect' though, otherwise it could end up getting rather childish.

HTH

Jamie...

Are you trying to block access to YOUR web server? If so you can check out /etc/hosts.deny. If the guys IP address is 192.168.0.28 and you want to block him from accessing the httpd service on your machine then you would have the following in your /etc/hosts.deny file:

httpd: 192.168.0.28

Obviously this is not limited to the httpd service only so you could easily block other services as well by doing something like:

sshd: 192.168.0.28
vsftpd: 192.168.0.28

etc.

Note that this will only work if you are using tcpwrappers around Apache, which often means if its being started from Inetd. Apache has its own Allow/Deny options in httpd.conf

cheers

Jamie...