scriptable internet access while maintaining LAN access

[korben_dallas]

I need a scriptable way of turning on and turning off internet access to a Windows PC, while maintaining its LAN access always.

The PC *must* be accessible on LAN at all times. But it's ability to go out to the internet can only be turned on and off via a script/executable.

Rules/ACL on the router is a no go, because it requires a lengthy reboot on any type of change like that, it takes down the whole network's internet access on the reboot, and there is no way to script or automate this on a schedule.

I'm pretty good w/ DOS batch files, the scheduler (AT), and starting/stopping Windows services, but so far I'm coming up blank on this issue.

[GKusnick]

You can probably do something with ROUTE ADD and ROUTE DELETE to enable/disable the default entry that routes non-local traffic to your default gateway.

[korben_dallas]

I didn't even know there was a ROUTE command. Looks interesting. Initial testing seems positive.

[davephan]

I Googled "command line setting dns server windows" and found the netsh command. Maybe that would work for you. I ran netsh /? but did not try anything else. It looks like it might work for you.

http://www.petri.co.il/configure_tcp_ip_from_cmd.htm

Dave

[korben_dallas]

I'm thinking changes to DNS might affect LAN performance, but being able to directly configure an interface, in particular the default gateway, is very useable. This may work better than ROUTE because it seems the PC doesn't recover too well from ROUTE changes until a reboot.

Keep'em coming guys.

[cychou]

Originally Posted by korben_dallas

I need a scriptable way of turning on and turning off internet access to a Windows PC, while maintaining its LAN access always.

I use the following reg files (in the zip) to turn on/off the proxy server of Internet Explorer on SageTV server.