Re: Block specifice private ip

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Malke (malke_at_nospoonnotreally.com)
Date: 11/15/04


Date: Mon, 15 Nov 2004 14:14:36 -0800

dsmcd wrote:

> Malke <malke@nospoonnotreally.com> wrote:
>>dsmcd wrote:
>>
>>> Hello...
>>>
>>> I have live servers and testing/training servers on my LAN.
>>>I'd
>>> like to ensure I don't inadvertently connect to a live server
>>> when I think I'm connected to a tester/training server and
>>>thus
>>> do irreparable damage.
>>>
>>> I'd like to prevent connections to specific private ips.
>>>Subnets
>>> don't do it since the IPs I'm after are scattered in a range
>>>of
>>> IPs.
>>>
>>> Any suggestions?
>>>
>>> Thx,
>>> D.
>>
>>Are you using a router? If so, you can deny specific IP
>>addresses access
>>to the Internet from the configuration interface.
>>
>>Malke
>
> The servers are on the LAN so preventing internet access won't
> do it. I'm thinking more along the lines of a hosts file, but
> for ip address. Redirect all traffic to a specidifed address to
> a null host.
>
> Any other suggestions?
>
> Thx,
> D.

I don't have any Windows server operating systems installed right now so
I can't check. On my machine I can set a Hosts Deny which will do
exactly what you want, but that won't help you because this is Linux.
I'm sure Windows servers must have the equivalent. Try posting your
question in one of the servers groups such as:

microsoft.public.windows.server.general

Sorry I wasn't able to help you with this.

Malke

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"


Relevant Pages

  • RE: IIS6 Security and other web servers
    ... IIS6 Security and other web servers ... I know of no Windows architecture that is exposed directly to ... I know of a number of LAMP-type servers that are ... exposed directly to the Internet with no intervening layers. ...
    (Security-Basics)
  • Re: Restrict Dynamic Updates
    ... exposed to the Internet is an inherently bad idea, but am in a position where ... my thought was to leave the clients pointing to the BIND/DNS ... servers to resolve all non-AD queries and redirect them to the AD/DNS servers ... internal DNS server host external public data. ...
    (microsoft.public.windows.server.dns)
  • Re: Windows client - internet connection sharing
    ... or USB port on your FreeBSD box. ... This enables you to set up a 'DMZ' network, ... instance have several servers visible on the Internet. ...
    (freebsd-questions)
  • Re: EBS 2008 and e-mail issues
    ... Whilst doing this they used the DNS ... I have reset all the firewalls rules back to default on the TMG server, ... Removed the DNS servers ... On 2003 SBS one would probably easily solve this by running the internet ...
    (microsoft.public.windows.server.sbs)
  • Re: How Secure is ".Local?"
    ... dozen servers and ~500 websites/public domains. ... I'm weighing the importance of split-brain DNS ... >It is not going to provide your zone info to anyone ... >on the Internet since local is NOT a zone in the ...
    (microsoft.public.win2000.dns)