StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>If you were to put no Default Gateway on Srv A, then nobody that's not directly connected to the server will be able to connect to it.</p> <p>1 & 1a) If anybody outside of subnetA (who arent directly connected) the traffic would probably make it to the server, but with no Default gateway, the server wouldnt know how to get the traffic back to the distant host, and drop the packets.</p> <p>2)unless the data goes TO THE SERVER FIRST, this shouldnt effect the connection with the other hosts, just the connection to the server. IF all the data goes to and from this server first before it leaves subnetA, then it would effectively be cut off for reasons in #1</p> <p>3) an "established connection" has passed some sort of handshake saying that the the 2 hosts will pass traffic. IE, TCP's 3 way handshake (im here, i see you, lets pass traffic), just a simple connection is a little vague, but i guess you can say it would encompass all kinds of connections, both "established connections" and connectionless with protocols like UDP ("a one way, dont care if you get the data connection")</p> <p>Now, my suggestion is to add the default route back in. Your just hurting yourself in the long run without it. Try googleing up some information about putting ACLs (access-lists) on your router.</p> <p>with ACLs you can specify "this subnet cant go to this IP address or subnet" the IP being that of your server.</p> <p>dont quote me but it would be something like</p> <p>ip access-list 1<br> deny all<br> allow any any</p> <p>then you apply it to the interface going TO serverA with something like this:</p> <p>ip access-list 1 out</p> <p>it will look something like this (sorry for not useing code blocks) this will deny the users in subnetB to send traffic OUT to serverA without effecting any other traffic</p> <p>This is probably the preferred method. I STRONGLY SUGGEST NOT FOLLOWING THE ANSWER YOU HAVE IN YOUR QUESTION that will cause much more harm than good. I hope this helps</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload