Re: [ilugd] Disabling Access to Windows OS computer on Ubuntu (linux) Network

2006-03-20 Thread Kishore Bhargava
[EMAIL PROTECTED] wrote:

> one more thing,
> 
> a. when I ping the network 192.168.0.255 -b it does not show the windows 
> machine , i have to physically go over and get the ip which it self is 
> okay but seems dangerous since I don't know which machines are logged in 
> ? ?? unlike for all the other linux machines.
> 
> Also the network is really simple - just an internet server based on 
> DHCP being enabled
> 

Ram,

For the windows machine which is the problem child, set a static IP instead of 
DHCP, then
remove the default gateway as I had suggested earlier and you would be fine. In 
any case,
if you have a small network, along with your DHCP, you may want to set 
reservations along
with MACs so that at any time you can keep track of the machines.

Not sure why your broadcast address is not showing the machine, but a more 
certain method
is to use something like nmap:

nmap -sP 192.168.0.0/24

Would yeild better results.

Cheers...Kishore
-- 
On a paper submitted by a physicist colleague:
"This isn't right.  This isn't even wrong."
-- Wolfgang Pauli

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] Disabling Access to Windows OS computer on Ubuntu (linux) Network

2006-03-20 Thread [EMAIL PROTECTED]
Akshay Lamba wrote:
> 
> 
> Probably multiple way's of doing this, here's some off the cuff:
> 1. Provide it with an IP tied up with it's MAC (or a static IP) and then
> create a iptables (firewall) rule to drop all packets from that IP.
> 2. Use squid and squidguard to allow/disallow internet access.
> 
> Akshay
> 
I cannot see the machine when pinging the broadcast ip

also our network is really simple and I don't know what it entails to 
set up squid

thanks
ram

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] Disabling Access to Windows OS computer on Ubuntu (linux) Network

2006-03-20 Thread [EMAIL PROTECTED]
Kishore Bhargava wrote:
> Ram,
> 
> One very lame way of doing this is to not assign a default gateway for the 
> machine. I have
> seen many Win Admins do this, but like I said its extremely lame. Using 
> iptables of a
> proxy would be a better way. But if its only this one machine, then just 
> remove its
> default gateway and it will not be able to access anything outside your 
> network. However,
> it will access all services on your network.
> 
> Cheers...Kishore

Thanks Kishore

one more thing,

a. when I ping the network 192.168.0.255 -b it does not show the windows 
machine , i have to physically go over and get the ip which it self is 
okay but seems dangerous since I don't know which machines are logged in 
? ?? unlike for all the other linux machines.

Also the network is really simple - just an internet server based on 
DHCP being enabled

regards
ram


___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] Disabling Access to Windows OS computer on Ubuntu (linux) Network

2006-03-20 Thread Kishore Bhargava
[EMAIL PROTECTED] wrote:
> Hi
> 
> We have a simple network that is served by a Ubuntu 5.04 based machine. 
> This machine basically acts as a DHCP server.
> 
> We have one machine that is a Win 98 (or any other win system - it is 
> connected to the network. I wanted to know if there was a way of 
> disabling network access to this machine. ??? or simply preventing 
> access to some served services !! (right term) like internet.
> 

Ram,

One very lame way of doing this is to not assign a default gateway for the 
machine. I have
seen many Win Admins do this, but like I said its extremely lame. Using 
iptables of a
proxy would be a better way. But if its only this one machine, then just remove 
its
default gateway and it will not be able to access anything outside your 
network. However,
it will access all services on your network.

Cheers...Kishore
-- 
"If people are good only because they fear punishment, and hope for reward,
then we are a sorry lot indeed."
-- Albert Einstein

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] Disabling Access to Windows OS computer on Ubuntu (linux) Network

2006-03-20 Thread Akshay Lamba
>We have one machine that is a Win 98 (or any other win system - it is 
>connected to the network. I wanted to know if there was a way of 
>disabling network access to this machine. ??? or simply preventing 
>access to some served services !! (right term) like internet.

Probably multiple way's of doing this, here's some off the cuff:
1. Provide it with an IP tied up with it's MAC (or a static IP) and then
create a iptables (firewall) rule to drop all packets from that IP.
2. Use squid and squidguard to allow/disallow internet access.

Akshay


Message sent using UebiMiau 2.7.9



___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



[ilugd] Disabling Access to Windows OS computer on Ubuntu (linux) Network

2006-03-20 Thread [EMAIL PROTECTED]
Hi

We have a simple network that is served by a Ubuntu 5.04 based machine. 
This machine basically acts as a DHCP server.

We have one machine that is a Win 98 (or any other win system - it is 
connected to the network. I wanted to know if there was a way of 
disabling network access to this machine. ??? or simply preventing 
access to some served services !! (right term) like internet.

will appreciate pointers and advice

thanks

ram





___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/