Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[scrubsguy]

is it possible to have come computers access access full internet( all url's) and some only limited (blocked via rules)

i know how to setup my rules so that the needed sites can be accessed, but now my directors need full inter access, is there a way i can add their mac/ip's to the unit so that they have full permissions?

[danilovav]

Make 2 NAT rules - first with limited by source network without limitations, second for another (lannet) with any limitations you want

It's impossible to make limitations by MAC, but you can fix IP-MAC bindings by static ARP

[scrubsguy]

ok i tried that, still nothing.

i created rules that limits everyone from certain sites...via URL filtering

so what i need is some computers to use BLOCKED rules and others to use OPEN rules

Blocked rules being the the filtered URL's and Open rules being full internet access.

[danilovav]

Show your rules

[scrubsguy]

Action : NAT
Service : http

                               interface                Network
Source                        Lan                       Any
Destination                  Wan                      Any


Services
Type : TCP
Source : 0-65535
Destination : 80,1493,1542,1863-1963,4000,5000-7000,8000-8088,13000

[danilovav]

I don't see any limitation :p
What limitations do you want to make?

[scrubsguy]

i want my CEO's and managers to have full internet access, and regular staff to be limited.how do i set that up? i have created a couple of rules but they seem to effect the managers aswell.

[danilovav]

What you mean by "limited"? Only allowed websites? Only HTTP (no torrents)? Limited speed?

Basically, your rules will be
NAT lan/ceo_group wan/all-nets all_services
NAT lan/lannet wan/all-nets limited_service

[scrubsguy]

yes, allowed websites........but i came right... i setup the DHCP protocol on my server, so i played with my reservations and added the mac's to authenticate via the dfl-210.... so was a lot simpler then i wanted to go..