Koozali.org: home of the SME Server
Legacy Forums => General Discussion (Legacy) => Topic started by: Bassman700 on May 27, 2005, 08:44:40 PM
-
Is there a way to block access to a particular web site or external IP? The goal is to prevent users and/or applications on the internal network, from sending data to a particular URL or IP. Any help would be appreciated.
-
One way is to use Dansguardian & configure the
bannedsitelist
or
bannedurllist
http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/dansguardian%20instal%20&%20configure%20HOWTO%20for%20sme%20server.htm
-
Hi ..
I hpe that this can help you, this id part off my
/etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don't
# want to do the full Sys V style init stuff.
# Tratando de controlar al KAzaa
/sbin/iptables -A FORWARD -p TCP --dport 1214 -j DROP
/sbin/iptables -A FORWARD -p TCP --dport 2091 -j DROP
/sbin/iptables -A FORWARD -p UDP --dport 1214 -j DROP
/sbin/iptables -A FORWARD -d 213.248.112.0/24 -j DROP
/sbin/iptables -A FORWARD -d 207.46.106.79 -j DROP
/sbin/iptables -A FORWARD -d 64.124.15.236 -j DROP
/sbin/iptables -A FORWARD -d 206.142.53.0/24 -j DROP
/sbin/iptables -A FORWARD -d 80.160.91.2 -j DROP
/sbin/iptables -A FORWARD -d 66.98.180.69 -j DROP
/sbin/iptables -A FORWARD -d 66.98.180.38 -j DROP
/sbin/iptables -A FORWARD -d 80.160.91.3 -j DROP
/sbin/iptables -A FORWARD -d 80.160.91.19 -j DROP
/sbin/iptables -A FORWARD -d 80.160.91.20 -j DROP
/sbin/iptables -A FORWARD -d 66.36.229.80 -j DROP
/sbin/iptables -A FORWARD -d 66.36.231.77 -j DROP
# Fin Kazaa
Here you can find how to drop ip address an ports
I am using sme 6.5rc1 modify with MC or your preferd
text editor and rebot your box, I hope that this can help.
Alberto :hammer: