Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to create a firewall rule which prevents users in the LAN to communicate directly with other users. In other words, deny access from any LAN address to all other LAN addresses. Is this possible to achieve? The router is DIR-815.

share|improve this question

I think it's possible, but you'll need to install dd-wrt so you can edit the routing table to put in purposefully-broken routes for your local subnet. It's also depends on how the ports on the router are set up. If the LAN ports are just a dumb hub, then every transmission is seen by every client and there will be nothing you can do to stop this. You're hoping for real switched ports.

share|improve this answer
Wouldn't that affect only IP packets? Windows can still use NetBEUI afaik. You'd need to block at the Ethernet (MAC) level. – MSalters Mar 28 '11 at 15:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.