Blocking Local network IPs from accessing a server

Posted on 2005-03-08
Medium Priority
Last Modified: 2013-12-04
What is the best, and simplist way to block local network IPs from accessing a local server.  

thanks in advance

Question by:DarrylBuck
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 20

Accepted Solution

DVation191 earned 750 total points
ID: 13486817
A software based firewall (especially a free one like Sygate http://www.majorgeeks.com/download.php?det=3356 or Tiny http://www.majorgeeks.com/download.php?det=760 ) will let you block any IP addresses you want from accessing your server is one of many solutions.

hope this helps.
LVL 15

Expert Comment

ID: 13487656
route add (local server ip) mask (random fake IP) metric 1
on the computers you don't want accessing the server. This will send the request to the fake IP therefore never making it to the server.  you can even put it in a logon script
LVL 38

Expert Comment

by:Rich Rumble
ID: 13487941
best is relitive... but windows has the ipsec firewall filters built in that work quite well. The "good" thing about the ipsec firewall on M$ is that the necessary port's for AD are allowed to pass with out restriction. This however is not good if the firewall is facing the internet, but this has been updated and the default allowed ports can be blocked by using a key in the registry.

Ipsec Firewall howto:
Unsecured traffic http://support.microsoft.com/kb/253169/EN-US/
Exemptions removed http://support.microsoft.com/kb/810207/EN-US/

The firewall in M$ 2003 server (service pack 1 beta btw) works very well also.
LVL 24

Expert Comment

ID: 13492194
2nd best answer is... put up a firewall and filter them out
> block local network IPs from accessing a local server

Best answer, if you have a server you want no one to use, unplug it.

answer three, use multiple LANs.  Users with good access separate physically from users without authorized access

Author Comment

ID: 13495590
Thanks for your input, I think I will go with the firewall solution, I was just seeing what other options there maybe


Featured Post

How Blockchain Is Impacting Every Industry

Blockchain expert Alex Tapscott talks to Acronis VP Frank Jablonski about this revolutionary technology and how it's making inroads into other industries and facets of everyday life.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
Suggested Courses
Course of the Month10 days, 16 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question