<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> You don't. Remember, the thin client itself isn't going out to the Internet. The thin client is simply a display station, and everything is running on the server. So, what you would have to do is block the *server* from going out to the Internet, specifically, the server's "outside" IP address. The approach I would try is putting, for example, an OpenBSD box in front of that K12LTSP server, and you'd then set up authpf on the OpenBSD box. Authpf makes you authenticate before being able to go out past it. But that's kinda complex to do. But unless you're very comfortable with OpenBSD and its PF rules, I wouldn't go this route. Another solution, and the one I would actually recommend, is to set up a second K12LTSP server that you don't allow to go to the Internet (you can block this server's IP address at your Internet router). Set up a bank of thin clients, label them "No Internet Access," and hook up these thin clients to this second K12LTSP server. --TP <div class="moz-signature">_______________________________ Do you GNU!? <a href="http://www.gnu.org/">Microsoft Free since 2003</a>--the ultimate antivirus protection! </div> Nataraj S Narayan wrote: <blockquote cite="mid45B4A8AD.4080209@sancharnet.in" type="cite">Hi How do I use iptables on a LTSP client? I have NAT machine, which is also the ltsp server. I mean, i need to block a few thin clients from accessing the Net. Tried disabling using the following in the Ltsp server, where 192.168.1.163 is Ltsp client. :- /sbin/iptables -A FORWARD -s 192.168.1.163 -j DROP /sbin/iptables -A FORWARD -d 192.168.1.163 -j DROP But this doesnt work. Also, I need to monitor what's going on the client occasionally from a remote location. Does vnc server/viewer suit this? Is there any other solution? regards Nataraj _______________________________________________ K12OSN mailing list <a class="moz-txt-link-abbreviated" href="mailto:K12OSN@redhat.com">K12OSN@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/k12osn">https://www.redhat.com/mailman/listinfo/k12osn</a> For more info see <a class="moz-txt-link-rfc2396E" href="http://www.k12os.org"><http://www.k12os.org></a> </blockquote> </body> </html>