Link to home
Start Free TrialLog in
Avatar of mvalencia2003
mvalencia2003Flag for United States of America

asked on

Windows XP , No Internet

I have an XP laptop and want to make it only internal to LAN -
NO Internet access at all.

What are the steps for this?
Thanks
Avatar of Dan Craciun
Dan Craciun
Flag of Romania image

Disable the DNS settings.
This way the laptop won't be able to connect to internet using names, only IPs. It's enough for most users.

You can do that from your network adapter's TCP-IP page.

Another option is to cut the internet access from the router, if it supports that function.

HTH,
Dan
Avatar of mvalencia2003

ASKER

So I need to set up static IP Address on the laptop and don't put DNS settings on?  or , is there a function to turn off DNS even if DHCP is on
?

Thanks
You can keep DHCP on, but check "Manually specify DNS servers" and leave the fields blank or put bogus addresses.
"... NO Internet access at all. "  ==>  Note that removing all DNS addresses will indeed make it unlikely that a casual user can get to the internet.    But it does NOT give you "no internet access at all".    Simply opening a browser and typing in an IP address will still go to that site.
e.g. http://65.55.57.27  will take you to Microsoft's site.

Since you still want internal network access, the best way to do what you want is to combine two approaches:

(1)  Do the manual DNS as already noted -- and leave them blank, so that you can't simply type a URL and get anywhere

AND

(2)  In your router, set it so the PC involved does NOT get access to the internet.   Virtually all modern routers will allow you to do this.     That will eliminate the "hole" I noted above, where you can get to the internet via an IP address.
Where is steps to do Step 2 above on a Linksys router ,
?


Thanks
What model?
you can simply put in a bogus gateway address. as long as there is a switch controlling the network and not through the router (probably would still work even on a built in switch/router, but a router might pass something I'm not sure).  
Routers are only used when the request is not local.
still have two way LAN traffic. but the machine won't be able to effectively initiate any WAN traffic.
"... Where is steps to do Step 2 above on a Linksys router " ==>  As Dan noted, you need to provide the specific model # to answer that.    But on most Linksys routers, just look carefully in the router's configuration page for "Internet filter" or "Web filter" settings.    This is likely in the firewall section of the configuration.
you can leave dhcp on, you juest need to disable route to internet.

under command line in windows  type:

route delete 0.0.0.0 mask 0.0.0.0

And to re-enable, add it back again:

route add 0.0.0.0 mask 0.0.0.0 "your gateway ip here"

Gilad
There are three solutions to your problem:

1) manually specify an static IP address WITHOUT a default gateway on the workstation

2) setup the router with a firewall rule that will block it from access the internet by denying its connectivity to the internet. For that you need to set and specify an IP reservation on the router that is performing DHCP server function. Basically that will endure that the workstation will always get the same IP when requesting DHCP.

2) Add the following route statement to your windows computer to route all internet traffic to a non-existing default gateway:

route -p add 0.0.0.0 mask 0.0.0.0 127.0.0.1
Linksys = Model: EA6200
SOLUTION
Avatar of Gary Case
Gary Case
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=23411 : worked ,

if I use this to block internet for one computer , this blocks incoming and outgoing traffic
?


Thanks
Yes, this effectively isolates that computer from internet.
Thanks
Glad I could help!