Can I deny internet from a doze box, but still get samba?

On Mon, 26 Feb 2007 19:14:18 +0000, Rich Grise wrote:
<snip>
> I dual-boot, Slack
> 11.0 or W2K.
>
<snip>
>
> Thanks,
> Rich
>
Not strictly on-topic...

Advice: stop dual booting. Run W2k under VMWare hosted on Slackware. That
way you can simplify your network layout, and also provide IPtables
protection for the W2k box.

--
Douglas Mayne

Rich Grise wrote:
> OK, here's the thing. I've got a "gateway" box, that has apache, for the
> website, Samba, for the LAN, and "dnsmasq", which it's. It plugs into the
> DSL, and there are 6 other boxen on the LAN. 3 of them are doze boxen, 2
> are "spare" Slack boxen, and one - my workstation - I dual-boot, Slack
> 11.0 or W2K.
>
> Is it possible, when I boot my box to Doze, to deny internet access to it,
> but still let it get to the Samba server?
>

The only way I can think of how this would work involves client config
somehow... either by static IP or some tricks.

What I would do would be to deny that IP access to the internet by
default, and then have your slack box "authenticate" in some manner
against your gateway which would allow external access.

I'm thinking a cron job that runs every minute on your gateway to
identify the internal box - if it's Slackware, allow, else deny.
(probe for a service that would prove it's slack and not windows...)

Ray

On Mon, 26 Feb 2007 19:14:18 +0000, Rich Grise wrote:

> OK, here's the thing. I've got a "gateway" box, that has apache, for the
> website, Samba, for the LAN, and "dnsmasq", which it's. It plugs into the
> DSL, and there are 6 other boxen on the LAN. 3 of them are doze boxen, 2
> are "spare" Slack boxen, and one - my workstation - I dual-boot, Slack
> 11.0 or W2K.
>
> Is it possible, when I boot my box to Doze, to deny internet access to it,
> but still let it get to the Samba server?

Thanks all! Too many answers, too little brains! :-) :-) :-)

Thanks!
Rich

"Rich Grise" <rich@example.net> wrote in message
news:pan.2007.03.02.23.21.42.15317@example.net...
> On Mon, 26 Feb 2007 19:14:18 +0000, Rich Grise wrote:
>
>> OK, here's the thing. I've got a "gateway" box, that has apache, for the
>> website, Samba, for the LAN, and "dnsmasq", which it's. It plugs into the
>> DSL, and there are 6 other boxen on the LAN. 3 of them are doze boxen, 2
>> are "spare" Slack boxen, and one - my workstation - I dual-boot, Slack
>> 11.0 or W2K.
>>
>> Is it possible, when I boot my box to Doze, to deny internet access to
>> it,
>> but still let it get to the Samba server?
>
> Thanks all! Too many answers, too little brains! :-) :-) :-)
>
> Thanks!
> Rich
>
AVG AV plus firewall supports W2k. You could install a free trial version
and see if it did what you wanted. I suspect it would do exactly what you
want if configured properly. Try this link :
http://www.grisoft.cz/doc/products-a...ewall/us/crp/0
..