Provided that one machine running on Windows 7, connected to LAN, and connected to the Internet via a gateway in the LAN. There are two logon user accounts A and B on the machine. I want:

1, User A can access the LAN but except the Internet;

2, User B can access the Internet but except the LAN.

How to define different firewall rules for A and B to achieve this?

Thanks in advance!

  • You're going to have to tell us which firewall you are using and where it is sitting. – Graham Hill Dec 27 '12 at 16:59
  • I'm using the built-in firewall of Windows 7. – xmllmx Dec 27 '12 at 22:26

If you are using the stock windows firewall, then this cannot be done. The firewall is machine-based, not user-based.

To have the control you want, you need to install a different firewall.

  • You can, I think, use GPO to dynamically reconfigure the built-in firewall based on who logs on, but of course that introduces much more complexity into the network than installing a "proper" firewall. – Graham Hill Dec 28 '12 at 10:00

If this is something you're not exactly trying to scale, then you could write some quick rules in Squid to accomplish what you need.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.