Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to allow a website for a single IP?! .. Please Help

    Scheduled Pinned Locked Moved Firewalling
    6 Posts 5 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      NT Egypt
      last edited by

      Hello guys,
      this is my first Topic , i would like to know with a simple steps how to allow only one website for a single IP, a client on our network want to access only one website to do his job tasks and i don't want just allow all internet access to the same IP ..
      So what i have to do?!
      Thanks
      PS:Forgive my language .. English is not my mother tongue

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        Add a firewall rule on LAN interface that allows source IP from your client to access destination IP of the web server.  If the web server has many IPs then make an alias and use that as the destination.  Put the rule above any block rules you have for denying web access to your other clients.

        1 Reply Last reply Reply Quote 0
        • kesawiK
          kesawi
          last edited by

          You can also configure custom ACL rules in squid if you are using squid proxy server.

          Create the following in the Custom ACLS (Before Auth) box under Advanced features in the Squid Proxy Server configuration page:

          acl clientexception_dst dstdomain .domainname.com
          acl clientexception_src src src.ip.of.client
          http_ access allow clientexception_src clientexception_dst
          

          More information on these configuration directives is available at http://www.squid-cache.org/Doc/config/acl/ and http://www.squid-cache.org/Doc/config/http_access/.

          1 Reply Last reply Reply Quote 0
          • B
            blood
            last edited by

            Hello,

            can anyone correct me on my set up, i have here LAN rule: Block 192.168.0.100 (client IP address) * !127.0.0.1 (website address) *  *  none
            when trying to access the specified website, it says website is not available. So i'm assuming that the website specified is blocked. Am i missing something here?

            1 Reply Last reply Reply Quote 0
            • M
              muswellhillbilly
              last edited by

              @blood:

              127.0.0.1 (website address)

              Er… 127.0.0.1 is the loopback address for your client. Not a website address.

              1 Reply Last reply Reply Quote 0
              • KOMK
                KOM
                last edited by

                Blood,

                Please start your own topic instead of hijacking this one.  Your problem has nothing to do with this thread.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.