Not allowing the server on the internet but keep it on the local network

[angrycomputingteacher]

I am trying to sort out a Windows Server 2008 box and I would like to kick it off the internet but have it remain on the local network so we can use file sharing. The machine is very old but we are keeping it for the time being.

 

The IP Address it uses is assigned by DHCP. I have tried setting the IP on the adapter itself but it then forgets the gateway and goes away on some random IP Address.

 

Any help would be greatly appreciated.

[FN-GM]

Windows Firewall maybe?

[mukz]

When you set the ip, you should leave the gateway out. Other than that all i can think of is 1) do you have a firewall which you can administer? If not ask someone who can administer is to put a block rule for that ip. 2) get something like pfsense which can do this, but overkill for one machine. 3)do you have web filtering software? This maybe depending on what you got should be able to block all internet traffic

[angrycomputingteacher]

When you set the ip, you should leave the gateway out. Other than that all i can think of is 1) do you have a firewall which you can administer? If not ask someone who can administer is to put a block rule for that ip. 2) get something like pfsense which can do this, but overkill for one machine. 3)do you have web filtering software? This maybe depending on what you got should be able to block all internet traffic

 

When I leave the gateway or DNS servers blank it does not go on the network at all and generates a random IP on a different subnet.

 

I could use Windows Firewall but not sure what to configure.

[mukz]

Ah i see, sorry.

 

In terms of Windows Firewall, i am pretty sure it wont work. It has to be an edge Firewall.

[Norphy]

What firewall do you use on the edge? Most should allow you to set a rule to deny traffic from specific IP addresses going out to the internet.

 

Have you tried setting a DHCP reservation to make sure it gets the correct IP address?

Edited June 23, 2017 by Norphy

[angrycomputingteacher]

We don't use an Edge firewall. Although we have client firewalls provided by our Antivirus.

 

The server has a set IP Address through DHCP but still dosent work.

[forkies]

Use cmd to set a route for internet 0.0.0.0 and point it to an ip that doesn't exist?

[Primus]

If you have no edge firewall then you have bigger problems...

[speckytecky]

If you have Impero or similar you could pop it in the No Internet default Group.

[mukz]

Going on from @Primus, how big is your network?

I would highly recommend putting something like pfsense in place.

[Michael]

Enter duff proxy settings.

[angrycomputingteacher]

Going on from @Primus, how big is your network?

I would highly recommend putting something like pfsense in place.

It's my home network just serving media and some docs. It's quite small.

[mukz]

Ahh enough said

[dapaulio]

Why not just set the proxy to 127.0.0.1 or any non valid proxy address