From mboxrd@z Thu Jan 1 00:00:00 1970 From: Nick Drage Subject: Re: Is it possible to Jam windows network neighbour? Date: Tue, 24 Aug 2004 13:41:39 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20040824124139.GD28997@metastasis.org.uk> References: Reply-To: Netfilter Mailing List Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: netfilter@lists.netfilter.org On Tue, Aug 24, 2004 at 08:18:25AM -0400, Jason Opperisano wrote: > > I am running Redhat Linux 9.0 machine for routing as well as > > iptables firewall for my network serving win 98 clients. For > > security reasons I do not want win 98 clinets to use pier to pier > > for transfering files/data among them. In this case win 98 clients > > do not need to talk to server. > > Is it possible to Jam pier to pier network ? so that copying of > > files from one win 98 client to other can be restricted. > > a firewall can only filter traffic that passes through it. if your > clients are all sitting on a LAN together, there is no way for an > upstream firewall to keep them from communicating with each other. Not quite true, sort of, but we're into Firewall / IPS ( Intrusion Prevention System ) territory here. "Snort" *might* be able to deny traffic on the network, failing that you're probably looking at commercial software. -- "I think a church with a lightning rod shows a decided lack of confidence"