SUBNETS?!?!?!?!  WTF!!!!! Just add a firewall rule!!!!  Something like this should work:

#iptables -A FORWARD -p tcp,udp,icmp -s <IP.you.want.blocked> REJECT

And you are done.  I am sure there are several switches you could add to make it tighter (like -f to catch fragments) but this is internal to your house right?

Dusty

> 
> If you are using MonMotha's iptables script, this can be done easily with
> the following.
> 
> http://www.mplug.org/phpwiki/index.php?MonMothaReferenceGuide
> 
> Add another subnet to INTERNAL_LAN, for example "192.168.3.0/24", but do not
> add that same subnet to MASQ_LAN or SNAT_LAN.  That will enable routing
> between machines on that subnet and your MASQ subnet, but 192.168.3.0/24
> would have no access to the Internet.
> 
> ----- Original Message -----
> From: "Julio C. Gutierrez" <gutierrej001@hawaii.rr.com>
> To: "Linux & Unix Advocates & Users" <luau@list.luau.hi.net>
> Sent: Wednesday, September 05, 2001 11:02 PM
> Subject: [luau] keeping some pcs off the net
> 
> 
> > is there a way to not let certain computers access the internet, like
> > blocking their connection? ( to be done on my own network )
> > TIA
> >
> > Julio
> 
> 
> 
> ---
> You are currently subscribed to luau as: dusty@sandust.com
> To unsubscribe send a blank email to $subst('Email.Unsub')