Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If I have an XP machine on a network, how can I make it so the machine can access other machines on the network but not access the internet?

share|improve this question
shouldn't manually setting up the network settings and in the process setting the DNS servers to a non-existent address ( work? or is my understanding of the function of a DNS server when accessing local computers flawed (that understanding being that they play little to no role)? – Xantec Mar 25 '11 at 2:43

You could use a firewall to take care of this. But if you're sure the user of this computer is not going to try to break out, there's also an easier option: invalidate or remove the default gateway, which is needed for any traffic outside of the local subnet.

Do not mess with the dns servers as xantec suggests, that could break lan-functions as well, such as printing to a network-printer or active directory.

share|improve this answer
thanks for teaching me something new – Xantec Mar 25 '11 at 13:29

You can change the hosts file in C:/Windows/System32/Drivers/Etc.

For example if you wanted to block, just add the following line to the hosts file:
share|improve this answer

If your router allows it you can block access to port 80 and 443 for the IP of the computer you want to disallow. You could also use IPsec to block the traffic here is a guide to setting it up.

share|improve this answer

You could set up a firewall to block all outgoing and incoming traffic on port 80.

share|improve this answer

You could specify an incorrect DNS server, that should do it. The LAN will still work.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.