D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: scrubsguy on July 19, 2011, 11:55:06 PM

Title: DFL-210 issue?
Post by: scrubsguy on July 19, 2011, 11:55:06 PM

is it possible to have come computers access access full internet( all url's) and some only limited (blocked via rules)

i know how to setup my rules so that the needed sites can be accessed, but now my directors need full inter access, is there a way i can add their mac/ip's to the unit so that they have full permissions?

Title: Re: DFL-210 issue?
Post by: danilovav on July 20, 2011, 10:08:36 AM

Make 2 NAT rules - first with limited by source network without limitations, second for another (lannet) with any limitations you want

It's impossible to make limitations by MAC, but you can fix IP-MAC bindings by static ARP

Title: Re: DFL-210 issue?
Post by: scrubsguy on July 21, 2011, 12:58:23 AM

ok i tried that, still nothing.

i created rules that limits everyone from certain sites...via URL filtering

so what i need is some computers to use BLOCKED rules and others to use OPEN rules

Blocked rules being the the filtered URL's and Open rules being full internet access.

Title: Re: DFL-210 issue?
Post by: danilovav on July 21, 2011, 09:42:37 AM

Show your rules

Title: Re: DFL-210 issue?
Post by: scrubsguy on July 21, 2011, 10:22:33 PM

Action : NAT
Service : http

                               interface                Network
Source                        Lan                       Any
Destination                  Wan                      Any


Services
Type : TCP
Source : 0-65535
Destination : 80,1493,1542,1863-1963,4000,5000-7000,8000-8088,13000

Title: Re: DFL-210 issue?
Post by: danilovav on July 22, 2011, 08:00:12 PM

I don't see any limitation :p
What limitations do you want to make?

Title: Re: DFL-210 issue?
Post by: scrubsguy on July 24, 2011, 10:42:57 PM

i want my CEO's and managers to have full internet access, and regular staff to be limited.how do i set that up? i have created a couple of rules but they seem to effect the managers aswell.

Title: Re: DFL-210 issue?
Post by: danilovav on July 26, 2011, 12:06:20 PM

What you mean by "limited"? Only allowed websites? Only HTTP (no torrents)? Limited speed?

Basically, your rules will be
NAT lan/ceo_group wan/all-nets all_services
NAT lan/lannet wan/all-nets limited_service

Title: Re: DFL-210 issue?
Post by: scrubsguy on July 27, 2011, 02:08:20 AM

yes, allowed websites........but i came right... i setup the DHCP protocol on my server, so i played with my reservations and added the mac's to authenticate via the dfl-210.... so was a lot simpler then i wanted to go..