Computing.Net > Forums > Networking > IP Filtering

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

IP Filtering

Reply to Message Icon

Name: Brian K
Date: April 4, 2004 at 13:08:46 Pacific
OS: Win XP Home
CPU/Ram: P4 2.6, 1024 MB
Comment:

I have a Netgear RP114, and according to the manual I should be able to set up an IP filter. I'm trying to block a computer from accessing the internet. This computer, according to the DHCP table has an IP of 192.168.0.3. However, when I try to block this IP as the 'source' IP address in the filter settings, I'm told it's an invalid IP address. I've turned the subnet mask on/off (if that has any effect), and played with port settings and everything else without any luck. Does anybody know what I'm doing wrong?

I don't know if the following settings have any effect on the router's ability to block but they might be useful for ya:
the IPs are generated by the router (if that has any effect)
I've been leaving the 'destination' IP filter information blank until I get this 'source' IP thing figured out

as an add on question, is there a good way of blocking the 'source' IP completely or am I going to have to set up several filters to block destination IPs and Ports?



Sponsored Link
Ads by Google

Response Number 1
Name: Dknowledge
Date: April 5, 2004 at 16:03:30 Pacific
Reply:

You have a couple of things here.

First - blocking one IP address when using DHCP is a BAD thing. Why?

DHCP dynamically assigns an IP address, so even if it give the one computer 192.168.0.3 this time, it could just as easily give it 192.168.0.4 the next time, which means you wont block the computer. Consequently another computer you do want to have access to the internet could end up with 192.168.0.3 and then you would be blocking it.

Solution...assign the one computer you want to block a Static IP address. Then assign the IP filter to block that static IP address.

Next, I can only speculate why you are getting an invalid address message which is directly related to the subnet mask. You don't just Turn on/and Turn off a subnet mask. It is as important a part of the IP addressing as the addressing. Without going too deep into things the subnet tells routers which part of the IP address is for the network and which part is for the host.

For example...192.168.0.3 with a subnet of 255.255.255.0 means the network is 192.168.0 and the compute is number 3, however, 192.168.0.3 with a subnet of 255.255.0.0 means the network is 192.168. and the computer is number 3 in a COMPLETELY different network. Consequently 255.255.0.0 for 192 is an invalid IP address. The reason being it's a Class C with a Class B subnet. You'll need to read a book on subnet masking for why.

Your subnet mask should match the subnet mask in your router for your network side (not the internet side). Verify with your router or router manual the subnet mask on the network side, and then match it in the filter subnet mask section.

As far as a good way to block the source IP I just gave it to you, without having to ever configure it to block a certain port. You block ports if you dont want to completely block the source IP from the internet or other services, just some in particular...I.E. you may not want it to have telnet capability, but your okay with it getting web browsers. You would set up destination IPs only if you know of certain internet sites you don't want anyone to get to like porn.

Get yourself a good basic book on networking with a section on IP addressing. You'll be glad you did.


0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Networking Forum Home


Sponsored links

Ads by Google


Results for: IP Filtering

IP filter with router www.computing.net/answers/networking/ip-filter-with-router/15804.html

IP Filter With router www.computing.net/answers/networking/ip-filter-with-router/15972.html

IP client filter. www.computing.net/answers/networking/ip-client-filter/29206.html