[LARTC] block ethernet IPv4 traffic

[Paul]

What about vlans?  Every machine on a separate vlan.  Easy enough if you
have access to the network

On Mon, 2004-07-19 at 09:03, Lawrence MacIntyre wrote:
> This will work as long as none of the clients are clued enough to add 
> host routes or alias addresses.
> 
> Rene Gallati wrote:
> > Anton Glinkov wrote:
> > 
> >> On Mon, July 19, 2004 15:25, Ed Wildgoose said:
> >>
> >>>
> >>>> the bridge thing is not possible.. the network is too big.. 300
> >>>> machines..
> >>>> with over 30 switches (only one of them is manageable) :(
> >>>> Basically I want to deny ethertype 0800 (IPv4) packets for that LAN.
> >>>> The only solution I thought of was to have a linux machine in this LAN
> >>>> that has all the possible IP addresses set on its interface.
> >>>>
> >>>>
> >>>
> >>> Look, we can't help you until you explain the problem
> >>>
> >>> WHY is it not possible to have a bridge?  This only requires two network
> >>> cards?
> >>
> >>
> >>
> >> I want to block the traffic between _ANY_ 2 of the machines in the 
> >> network.
> > 
> > 
> > How about giving them a netmask of /32 instead of /24 (or whatever you 
> > have) so that they only see themselves in the same network and then 
> > giving them a static route to the default gw (since it is outside of the 
> > /32).
> > 
> > Then you can block all inter-client traffic at that single default 
> > gateway (or one hop "in front" of it, seen from the clients)
> > 
> >