disable internet access to server

jonfa · 06-24-2005, 12:27 PM

Hi All,

I currently have a small server on my lan. I have a few XP boxes and a FC3 server for files. All machines are behind a Linksys router. Is there a way to disable internet access to the server, but still be available to the LAN?

azucaro · 06-24-2005, 12:49 PM

What kind of server are you talking about? FTP, HTTP, Samba?

jonfa · 06-24-2005, 01:43 PM

Just a samba server. I want it to only see and communicate with the LAN clients and not the outside world at all. Basically, I want it to only think the LAN computers are the only ones that exist. Is this a perfect scenario for Iptables?

SirGertrude · 06-24-2005, 02:11 PM

Yes, iptables would work great for this. You need a rule that will drop all packets destined for a network other than that of your internal LAN.

Try this:

Assuming your internal network is 192.168.1.0/24

Code:

iptables -I OUTPUT 1 ! -d 192.168.1.0/24 -j DROP

This will drop any packet leaving the server that is not destined for an IP address located on your LAN. Since you are already behind a router you won't need to worry about incoming traffic.

I hope this helps!