Exclude Internet Access on one PC within a network?

suarve · 7 Oct 2010 at 15:38

Hi,

Is the following possible?

I have several PC's and 3 printers networked - using a switch and router.

I have one PC that I don't want to allow internet access to - I just need this PC to have access to the internal network (shared folders, printers etc.)

Thanks

Radiation · 7 Oct 2010 at 15:47

Yeah you should be able to do it with a software firewall, you can set it up to only allow connections to certain things while making everything else blocked by default.

suarve · 7 Oct 2010 at 15:49

Radiation said:
Yeah you should be able to do it with a software firewall, you can set it up to only allow connections to certain things while making everything else blocked by default.

Is there no way to do it without installing any extra software?

Morbius · 7 Oct 2010 at 15:58

Some routers have internet access options in the control panel. If yours is one that does, then you might be able to disable access for that computer.

suarve · 7 Oct 2010 at 16:01

Morbius said:
Some routers have internet access options in the control panel. If yours is one that does, then you might be able to disable access for that computer.

Would giving the pc in question a static ip and denying access from that up work?

anything I don't mind · 7 Oct 2010 at 16:13

You could disable it within the browser, by inserting a fake proxy and using group policy to prevent it from being changed. But someone could just install a new browser. If you removed admin privs and prevented install of new software you could lock it down that way.

You could install software that will do that, otherwise you will have to do it on the router itself.

Might be able to do a trick with a fake gateway but never tried, might affect lan perfomance.

Radiation · 7 Oct 2010 at 16:13

suarve said:
Would giving the pc in question a static ip and denying access from that up work?

If there's a setting on the router then thats the best way.

Pulse · 7 Oct 2010 at 16:19

Could do as other people have suggested and block all of the ports to and from that computer on the router, means that it still allow network access for that computer but no internet.

HazardO · 7 Oct 2010 at 16:46

MAC filtering on the router if it supports it.

PistolPete · 7 Oct 2010 at 18:27

If the user is not technically savvy, simply give the machine a static IP without a default gateway.

HazardO · 7 Oct 2010 at 18:31

PistolPete said:
If the user is not technically savvy, simply give the machine a static IP without a default gateway.

If you do this, make sure it's an address outside of the DHCP server's range, but within the same subnet. eg: if the router hands out addresses 192.168.1.1 to 192.168.1.10, give the machine the address 192.168.1.11. Subnet mask is likely to be class C (255.255.255.0).