On Thu, 31 Mar 2005 21:05:19 +0200, marijan <mjakara at xnet dot hr> wrote:
> Because I have 4 lan interfaces and have some users on all this
> interfaces (subnets) and some users on other routered network and all
> they going out to wan interface.
> I want let out only some computers (users) and want to be able go to
> Internet while all other computers not.
Allow the routed hosts to talk with an allow rule and then follow up
with blocking rules to keep the hosts that you wish not to allow to
IE: Add some rules similar to:
Proto Source Port Destination Port Description
A * 192.168.1.0/24 * 192.168.2.0/24 * Allow
D * 192.168.2.24/32 * *
* Deny 2.24 to internet.
This will pass routed traffic between the subnets and then if the host
(2.24) wishes to talk to the internet they will be blocked.