Removing a server from the internet

platypus · 3 Jan 2013 at 13:43

I want to lock down a server and remove any internet access to it, whilst maintaining lan access. Is it easiest to do this on the router (eg blacklist its mac address)?

platypus · 3 Jan 2013 at 14:07

Asus Rt56-nu.

platypus · 3 Jan 2013 at 15:00

tribz said:
Assuming your not forwarding ports to it from the router, just remove its gateway IP address on the server.

I'm allocating the IP addresses by mac reservation, and setting the ip dynamically on the server so it picks up its gateway automatically.

platypus · 3 Jan 2013 at 19:28

matthab said:
This does depend if you want to block inbound or outbound.

Adjust the firewall rules on the server and by default your router shouldn't allow inbound connections. Id just put a block on the router saying block the IP from making outbound connections.

Both really, I want it completely isolated from the internet. I'll have a play with the firewall.

platypus · 3 Jan 2013 at 20:48

Ok I'll do that then, cheers

.

platypus · 4 Jan 2013 at 07:22

KIA said:
This.

Give the server a static IP.

aln said:
Thats what a firewall is for.

Whilst both are options, which is better and why?

platypus · 4 Jan 2013 at 09:32

Avathar77 said:
Do you not need windows updates? (assuming it is windows based)

I'll probably use WSUS, but yes this is a consideration.

leigh_boy said:
i would give it a static ip address i wouldld also say its poor practise to have a server on a dynamic ip.
and then i would do as sugested dont put a gateway in.
unless its a dns server then it will need internet access.

Aye I just preferred doing that, as the server isn't providing dhcp, so it's not a case that if the server goes down the routing goes down. Still, as its best practice I'll probably switch it over tonight.