block local user to access a site

xen_chris · 04-15-2003, 02:02 AM

one of my local net colleagues just disrespect me. and since i have the computer which is used as a gateway to linux, and i know the root password, and i told the guy from my local net the respective ip address, now i just want to block it.
i believe it would be something like: block 192.168.0.28 88.231......
if this doesn't brake your moral code, then i need your help. thx in advance.

jharris · 04-15-2003, 08:49 AM

If you want to stop him accessing a specific site then you'll need to know the IP address of the site in question, then you'll need to drop everything/deny everything that's comming from his PC destined for the site in question. You'll need to use IPTables to do this. Take a look at the http://www.tldp.org/HOWTO/Firewall-HOWTO.html for some general IP filtering stuff.

I would be tempted to just talk to him about his 'disrespect' though, otherwise it could end up getting rather childish.

HTH

Jamie...

Crashed_Again · 04-15-2003, 09:51 AM

Are you trying to block access to YOUR web server? If so you can check out /etc/hosts.deny. If the guys IP address is 192.168.0.28 and you want to block him from accessing the httpd service on your machine then you would have the following in your /etc/hosts.deny file:

httpd: 192.168.0.28

Obviously this is not limited to the httpd service only so you could easily block other services as well by doing something like:

sshd: 192.168.0.28
vsftpd: 192.168.0.28

etc.

jharris · 04-15-2003, 09:55 AM

Quote:

Originally posted by Crashed_Again
Are you trying to block access to YOUR web server? If so you can check out /etc/hosts.deny.

Note that this will only work if you are using tcpwrappers around Apache, which often means if its being started from Inetd. Apache has its own Allow/Deny options in httpd.conf

cheers

Jamie...