Koozali.org: home of the SME Server

Can I block a user accessing a particular web site

Bassman700

Can I block a user accessing a particular web site
« on: May 27, 2005, 08:44:40 PM »
Is there a way to block access to a particular web site or external IP?  The goal is to prevent users and/or applications on the internal network, from sending data to a particular URL or IP.  Any help would be appreciated.

Offline raem

  • *
  • 3,972
  • +4/-0
...

Offline lu2fgn

  • ***
  • 55
  • +0/-0
    • http://www.sateliteros.com.ar
Can I block a user accessing a particular web site
« Reply #2 on: May 28, 2005, 04:49:22 AM »
Hi ..

I hpe that this can help you, this id part off  my
/etc/rc.d/rc.local

#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don't
# want to do the full Sys V style init stuff.

# Tratando de controlar al KAzaa
/sbin/iptables -A FORWARD -p TCP --dport 1214 -j DROP
/sbin/iptables -A FORWARD -p TCP --dport 2091 -j DROP
/sbin/iptables -A FORWARD -p UDP --dport 1214 -j DROP
/sbin/iptables -A FORWARD -d 213.248.112.0/24 -j DROP
/sbin/iptables -A FORWARD -d 207.46.106.79 -j DROP
/sbin/iptables -A FORWARD -d 64.124.15.236 -j DROP
/sbin/iptables -A FORWARD -d 206.142.53.0/24 -j DROP
/sbin/iptables -A FORWARD -d 80.160.91.2 -j DROP
/sbin/iptables -A FORWARD -d 66.98.180.69 -j DROP
/sbin/iptables -A FORWARD -d 66.98.180.38 -j DROP
/sbin/iptables -A FORWARD -d 80.160.91.3 -j DROP
/sbin/iptables -A FORWARD -d 80.160.91.19 -j DROP
/sbin/iptables -A FORWARD -d 80.160.91.20 -j DROP
/sbin/iptables -A FORWARD -d 66.36.229.80 -j DROP
/sbin/iptables -A FORWARD -d 66.36.231.77 -j DROP
# Fin Kazaa

Here you can find how to drop ip address an ports
I am using sme 6.5rc1 modify with MC or your preferd
text editor and rebot your box, I hope that this can help.

Alberto  :hammer:
......