Return to Question

clarified the question (comments). Edited "server" to "host" (question is not about how to configure a router or a VM host)

Source Link

edited Oct 5, 2017 at 13:11

sebasth

15.8k
6
53
71

Block WAN Access - Allow LAN Access - Linux Serverhosts

What I am looking to do is block access to WAN and only allow the serversthese hosts to talk to each other on the 192.168.1.0/24 LAN. This configuration should be done on the hosts in question.

There are some similar posts to this, but tend to be too specific use case, or overly complicated. I now pay for internet per/GB. I have certain VM's that don't really need WAN Access after being setup, but seem to be using large amounts of data. (LDAP Server for some reason?)

I'm looking into DD-WRT Filtering, but I wondered how to do this serverhost side.

I will also be looking into enabling WAN Access for 1 hour daily, this. This could be done via "reverse iptables script" run in"iptables script" with CRON, or just via DD-WRT.

I'm guessing IPTables is the way to go,. I think all of my servers use IPTables, some have UFW and some have FirewallD.

I figure this can be a "generic question" with mostly answers that should work across many/all distro's, butdistros. But just to add, I'm mostly using Ubuntu 14/16 and CentOS 6/7.

Block WAN Access - Allow LAN Access - Linux Server

What I am looking to do is block access to WAN and only allow the servers to talk to each other on the 192.168.1.0/24 LAN.

I'm looking into DD-WRT Filtering, but I wondered how to do this server side.

I will also be looking into enabling WAN Access for 1 hour daily, this could be done via "reverse iptables script" run in CRON, or just via DD-WRT.

I'm guessing IPTables is the way to go, I think all of my servers use IPTables, some have UFW and some have FirewallD.

I figure this can be a "generic question" with mostly answers that should work across many/all distro's, but just to add, I'm mostly using Ubuntu 14/16 and CentOS 6/7.

Block WAN Access - Allow LAN Access - Linux hosts

What I am looking to do is block access to WAN and only allow these hosts to talk to each other on the 192.168.1.0/24 LAN. This configuration should be done on the hosts in question.

I'm looking into DD-WRT Filtering, but I wondered how to do this host side.

I will also be looking into enabling WAN Access for 1 hour daily. This could be done via "iptables script" with CRON, or just via DD-WRT.

I'm guessing IPTables is the way to go. I think all of my servers use IPTables, some have UFW and some have FirewallD.

I figure this can be a "generic question" with mostly answers that should work across many/all distros. But just to add, I'm mostly using Ubuntu 14/16 and CentOS 6/7.