Disable internet for a computer but allow network: sharing, print etc?

[Guest kevinmd88]

Hi all. I have a home wireless network set up through a router in my house. I have a couple of computers that have complete wireless access - I.E. file sharing, printer sharing, internet, etc.

But now what I'm looking to do is to add a computer to the network, but disallow it internet access. Just the one computer. However, I do need this computer to be able to access shared folders on the network, shared printers, and any other available network resources.

Is there some kind of hackish fix for this, some setting on the computer or on the router (router would be best) to accomplish this? I've read you can do it by setting no gateway on the computer... is this valid?

Thanks for your help in advance :)

[dragon2611]

Try looking in the firewall settings for your router.

I know on mine i can bind an IP to a mac address in the DHCP server then setup a filter to block that machine from internet access

[Guest kevinmd88]

Thanks, I see a page in my router that has a Block Services option but I don't see anywhere an option for Internet. I see HTTP in the service list but I figured that would be like an Apache server on the computer... or am I wrong? If I am that's the solution I'm looking for.

[k22]

  kevinmd88 said:

Hi all. I have a home wireless network set up through a router in my house. I have a couple of computers that have complete wireless access - I.E. file sharing, printer sharing, internet, etc.

But now what I'm looking to do is to add a computer to the network, but disallow it internet access. Just the one computer. However, I do need this computer to be able to access shared folders on the network, shared printers, and any other available network resources.

Is there some kind of hackish fix for this, some setting on the computer or on the router (router would be best) to accomplish this? I've read you can do it by setting no gateway on the computer... is this valid?

Thanks for your help in advance :)

assign a static IP and don't enter any DNS servers or change the routing table so that the default route doesn't point to the right gateway. quick and dirty way and would be easy to work around - i guess it depends upon who will be using it and whether or not they will try to get around your restrictions.

[Guest kevinmd88]

The routing table works like a charm :) Thanks! I think that's the method I'll use until either I get a new router or I figure out a setting in it that will do this more efficiently. I know he won't be able to figure out how to change the routing table for sure (he wouldn't even be able to figure out how to change the gateway if I left it blank in the properties :) ) but the only thing I worry about are his friends. I don't think any of them know how to do this kind of stuff, I am pretty sure they don't but I'd rather be safe than sorry.

Thanks to everyone who posted for your help!

[+BudMan MVC]

Whats the model number of your router - then we can lookup if your router supports blocking internet access.. Most any decent router would support this. But without a model number, its impossible to know what features supports or does not support.

[Guest kevinmd88]

Hi BudMan, sorry for not including that info :) It's a NetGear WGR614 v6 router, with the latest firmware. (Updated as of yesterday)

[+BudMan MVC]

An what version of the firmware are you running? As of yesterday does not give the version number, over the years I have come to understand that users version of lastest, an the actual latest version of the firmware rarely matches up ;)

It's just easier for everyone involved to just give the actual number!

Why do people continue to buy such crap devices?? The feature set of that router is a complete an utter joke. That being said, you can still accomplish what your wanting to do.. Just setup tcp ports 1-65534 and udp 1-65534 as user defined services an then block those by the IP address of the machine you do not want to access the internet.. An they yes make sure you set a reservation for that machine or set up its IP static.. the details of doing that are on page 4-4 of the manual.

Since it does not seem to allow blocking access by mac. An since it would be possible for them to change their IP quite easy -- maybe setting a route on their machine might be harder for them to figure out ;)

[Bgnn32]

If you are running Windows XP you can use Steadystate, google it. it is free from Microsoft and allows all sorts of lock down options on a computer, all based on user name.