Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

Provided that one machine running on Windows 7, connected to LAN, and connected to the Internet via a gateway in the LAN. There are two logon user accounts A and B on the machine. I want:

1, User A can access the LAN but except the Internet;

2, User B can access the Internet but except the LAN.

How to define different firewall rules for A and B to achieve this?

Thanks in advance!

share|improve this question
You're going to have to tell us which firewall you are using and where it is sitting. – Graham Hill Dec 27 '12 at 16:59
I'm using the built-in firewall of Windows 7. – xmllmx Dec 27 '12 at 22:26

2 Answers

up vote 1 down vote accepted

If you are using the stock windows firewall, then this cannot be done. The firewall is machine-based, not user-based.

To have the control you want, you need to install a different firewall.

share|improve this answer
You can, I think, use GPO to dynamically reconfigure the built-in firewall based on who logs on, but of course that introduces much more complexity into the network than installing a "proper" firewall. – Graham Hill Dec 28 '12 at 10:00
up vote 0 down vote

If this is something you're not exactly trying to scale, then you could write some quick rules in Squid to accomplish what you need.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.