Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I would like to create a firewall rule which prevents users in the LAN to communicate directly with other users. In other words, deny access from any LAN address to all other LAN addresses. Is this possible to achieve? The router is DIR-815.

share|improve this question
add comment

1 Answer

I think it's possible, but you'll need to install dd-wrt so you can edit the routing table to put in purposefully-broken routes for your local subnet. It's also depends on how the ports on the router are set up. If the LAN ports are just a dumb hub, then every transmission is seen by every client and there will be nothing you can do to stop this. You're hoping for real switched ports.

share|improve this answer
    
Wouldn't that affect only IP packets? Windows can still use NetBEUI afaik. You'd need to block at the Ethernet (MAC) level. –  MSalters Mar 28 '11 at 15:29
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.