iptables -

[Mike Wright]

On 02/08/2016 02:10 PM, Bob Goodwin wrote:
>
> Can someone give me an example [for my router] of the iptables code
> needed to prevent 192.168.1.17 from connecting to the internet while
> keeping normal LAN access?

Hi Bob,

Decided lack of info to go on but this will accomplish that.

If you just want the internet to be "non-existent" WRT 192.168.1.17 the 
easiest way is to DROP all traffic between them.

Let eth0 be the internet connected network card.

iptables -t filter -A INPUT -i eth0 -d 192.168.1.17 -j DROP
iptables -t filter -A OUTPUT -o eth0 -s 192.168.1.17 -j DROP