How do i block certain LAN IP from accessing internet?

[jay]

Good day,

I would like to block certain lan ip (not ip range) from accessing internet and only allow to access certain websites. Hope somebody can help me on this. I used one of the article in linuxsolved forum to do the internet sharing (http://www.linuxsolved.com/forums/viewtopic.php?p=298#298).

I shall be grateful if somebody can assist me on this.

Thank you.

[Ricky]

well that is possible. Use squid and create seperate acl for each client and then set access control for it.

[dragoncity99]

Yes, Ricky pointed out.

You can either use:

1. Proxy

or

2. Pure iptables to filter out.

If, ur filtering out different networks according to their network segments, i.e.:

10.0.0.x
10.0.1.x
well it's still possible

If, ur serious about iptable to help u, u can dig here:

linuxguruz.com/iptables/