Blocking ranges of IP address

28 Nov 2007 7:36 PM

Gis Bun

Hi,

I'd like to block a range of IP address (actually a whole subnet like
172.16.1.0) but ***not*** using a firewall. Can this be done through a LMHost
file? It's more like I don't want anything trying to access that segment.

How about (at least) adding the IP address range/segment to IE's restricted
zone?

Thanks

Gis

28 Nov 2007 9:06 PM

John Wunderlich

=?Utf-8?B?R2lzIEJ1bg==?= <Gis***@discussions.microsoft.com> wrote in

Show quote

news:6C68E185-00D9-4E71-909F-5BF576B929FD@microsoft.com:

> Hi,
>
> I'd like to block a range of IP address (actually a whole subnet
> like 172.16.1.0) but ***not*** using a firewall. Can this be done
> through a LMHost file? It's more like I don't want anything trying
> to access that segment.
>
> How about (at least) adding the IP address range/segment to IE's
> restricted zone?
>
> Thanks
>
> Gis

Your best bet for this is to add a route to the routing table that
vectors accesses to that address range away from the default Gateway
to, perhaps, back to your own computer instead.

The "Route" command is documented here:
<https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/route.mspx?mfr=true>

See also "Adding a TCP/IP Route to the Windows Routing Table"
<http://www.howtogeek.com/howto/windows/adding-a-tcpip-route-to-the-windows-routing-table/>

HTH,
John

29 Nov 2007 6:31 PM

Gis Bun

Thanks. I'll look into them (thanks to Jack as well).

Show quote

"John Wunderlich" wrote:

> =?Utf-8?B?R2lzIEJ1bg==?= <Gis***@discussions.microsoft.com> wrote in
> news:6C68E185-00D9-4E71-909F-5BF576B929FD@microsoft.com:
>
> > Hi,
> >
> > I'd like to block a range of IP address (actually a whole subnet
> > like 172.16.1.0) but ***not*** using a firewall. Can this be done
> > through a LMHost file? It's more like I don't want anything trying
> > to access that segment.
> >
> > How about (at least) adding the IP address range/segment to IE's
> > restricted zone?
> >
> > Thanks
> >
> > Gis
>
> Your best bet for this is to add a route to the routing table that
> vectors accesses to that address range away from the default Gateway
> to, perhaps, back to your own computer instead.
>
> The "Route" command is documented here:
>   <https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/route.mspx?mfr=true>
>
> See also "Adding a TCP/IP Route to the Windows Routing Table"
>   <http://www.howtogeek.com/howto/windows/adding-a-tcpip-route-to-the-windows-routing-table/>
>
> HTH,
>   John
>

28 Nov 2007 11:19 PM

Jack (MVP-Networking).

Hi
As far as the Host File goes.
HOSTS file does work with wildcards to block a range of servers (or IP),
such as *.site.com
HOSTS file only map host names to IP addresses. Mapping an IP to another IP,
or a host name to another host name does not work.
You have one good solution in the post above.
There are other solutions as well. You would have to post more details
about you Network and the functional purpose of the "feature" if you need
more help.
Jack (MVP-Networking).

Show quote

"Gis Bun" <Gis***@discussions.microsoft.com> wrote in message
news:6C68E185-00D9-4E71-909F-5BF576B929FD@microsoft.com...
> Hi,
>
> I'd like to block a range of IP address (actually a whole subnet like
> 172.16.1.0) but ***not*** using a firewall. Can this be done through a
> LMHost
> file? It's more like I don't want anything trying to access that segment.
>
> How about (at least) adding the IP address range/segment to IE's
> restricted
> zone?
>
> Thanks
>
> Gis
>
>