How to disable wan (in and out) but allow Lan access and shares?

[biffa]

Hi folks,

I'm just wondering, how do I go about stopping my computer accessing the internet either inbound or out and access but still allow Lan for shares?

Would this setup in the link stop outsiders having access and also myself having access to the internet but allow Lan for local shares?

I aren't bothered about accessing the internet I can always change the settings back if I want to.

[SOLVED] How to disable Internet connection without disabling the LAN/network? | Tech Support

Tia!

 

[samuria]

Two ways on the router disconnect the internet cable or the other way is give each device a fixed IP with NO default gateway

 

[biffa]

Thanks for the reply!

I've just been into my router and found the firewall options,

Outbound ipv4 is set to block all ports on my 192.x.x.x address
Inbound ipv4 is set to block all ports on the same address.

I can still access the pc via local network (great!) That's what I want. I can't access the internet from this machine or ping any i.p address from it either. (Great!) So it looks like the firewall in my router way have done it.

Just to clarify if I set ipv4 for both in bound and outbound to block all ports on Lan address 192.x.x.x , does this now mean that my machine is now unable to connect to the internet and is only connected via local network?

Tia!

 

[samuria]

Its not simple as software on the pc can open ports just unplug the internet connection that bomb proof

 

[AK6DN]

Thanks for the reply!

I've just been into my router and found the firewall options,

Outbound ipv4 is set to block all ports on my 192.x.x.x address
Inbound ipv4 is set to block all ports on the same address.

I can still access the pc via local network (great!) That's what I want. I can't access the internet from this machine or ping any i.p address from it either. (Great!) So it looks like the firewall in my router way have done it.

Just to clarify if I set ipv4 for both in bound and outbound to block all ports on Lan address 192.x.x.x , does this now mean that my machine is now unable to connect to the internet and is only connected via local network?

Tia!

Do you have IPv6 enabled on your ethernet interface?
Does your router support IPv6?
Does your ISP support IPV6.

Just disabling IPv4 these days may NOT be enough to disable internet access.

Unplugging the WAN network cable from your router is a sure way to guarantee no internet access, but only works if you want to stop ALL internet access, and not if you want to disable just a selective set of hosts on your network.

 

[biffa]

Thanks for the replies folks,

I do have ipv6 and yes my router and ISP support ipv6 I have disabled this in adapter settings and found I am unable to then connect to my pc for shares over local network so that isn't an option.

I can't really unplug the internet cable to to the router as there's other devices I want connected to the internet.

Surely there must be a way to stop one device being able to connect to the outside world and only capable of communicating to other internal devices over the local network?.

 

[AK6DN]

Thanks for the replies folks,

I do have ipv6 and yes my router and ISP support ipv6 I have disabled this in adapter settings and found I am unable to then connect to my pc for shares over local network so that isn't an option.

I can't really unplug the internet cable to to the router as there's other devices I want connected to the internet.

Surely there must be a way to stop one device being able to connect to the outside world and only capable of communicating to other internal devices over the local network?.

There is, it is called an IP Firewall. There are discrete programmable boxes (mainly for businesses) that are made which you would put your modem/router on one side and your internal network on the other side. Then configure how you want connections to be made. This is (probably) overkill for what you need to do.

Most router/modems/wireless access points these days offer allow/deny access based on MAC ID, either wireless or wired. You may want to investigate this option. Blocking outgoing IPv4 access from your system based on assigned IP address should also be possible.

IPv6 is a bit trickier, depends on how your router assigns local/global IPv6 addresses. After blocking IPv4, you might want to check: Test your IPv6. to see if IPv6 is still getting thru.

 

[biffa]

Yeah that does sound like overkill for what I need which in my mind is a simple task, stop inbound/outbound wan usage and only allow local area network access.

I've been into my router settings again and this time gone into the firewall settings and selected:
"all" for services
Block always
And then the internal i.p address 192.x.x.x for the ipv4 side of things

The ipv6
Done the same. Blocked all ports and block set to always.

I can still access my computer and shares via other devices connected to the same router.

The computer is no longer able to ping i.p addresses or access any websites.

If I have blocked all ports and used the ipv6 and ipv4 addresses in the router firewall does this sound correct?

Thanks!

 

[biffa]

Well... The above didn't work so reverted back to original setup.

I use eset internet security, I've set my firewall to automatic and then created a rule that covers any protocol ( FTP http etc) and to block all.

I then tried to connect a device to my computer via local network and eset blocked it, I unblocked it and I can access this particular application on my computer, while the computer is blocked inbound and outbound traffic.

If I try to ping or connect anything else, it's blocked until I click unblock in eset wizard, when I click unblock it creates a firewall rule that allows that device through to a particular application. Seems to work? Can't ping or access the internet. Running CMD and trying i.p config

Shows my computer name and disconnected

It shows internal i.p address of 192.X.x.x and an ipv6 address but even so, it appears my machine is isolated from the internet? Would this be right?