HOw to restrict the computer access to Internet.

[novice]

Hi all!

Could anybody help me with this problem?

===============
Situation: I am using the DSL for Internet access and I want only the specified computers on the network can acess to WWW and the rest others can acess only POP3 mail. (Internet sharing using NAT)
===============

My system info:
===============
- OS: Windows 2000
- NIC: 2 NICs (one to DSL and One to LAN)
- Internet sharing methods: NAT
- IP: Static IP
- Wingate: 6.0.1 Pro
===============

Actually, I used to make it work in version 5.3.2 by Assume Those Ips which will allow to access to Internet as one account and allow only this account have right to acess WWW Proxy. However, When I apply the above method to Wingate version 6.0.1, I all the user Can not open the webpage (the message show "Access Denied" "Error 403 Fobiden..".

Could anybody give me some advice to solve this problem? and How to solve it?

Thanks in advance for your helps.

Novice

[Pascal]

A few things:

What other policies do you have set ? It is possible that a ban list, a time restriction, etc. could affect this.

Are you using Intercepts (TRs in earlier versions) ? It seems so (WWW error message) - but you indicate you're using NAT. I'm going to work from the viewpoint that you are using Intercepts, and are applying policies in the WWW Service then. What setting do you have for "System Policies" ? They should be set to be "Ignored".

Also, check the level of authentication requires for your users. As you are using their IP address to assume the username, you should only need to have them set to "User may be assumed". If you set them to "User must be authenticated" you will need to enable some form of authentication.