Allow network sharing - but selectively deny internet access

* Allow home network sharing - but selectively deny internet access to secondary computers

Searching for answers, I found threads for the inverse situation
(allow guest internet access but block access to host resources) but not my question.

-------------------------------------------------------------------------------------

I want to share resources between 2-5 machines at home,
but deny internet access to the secondary machines - except when I specify.

I run machines off a 10 port GB ethernet switch before the router.

How can I do this? Thank you

all cable from 10 port switch -- 1 is w7 the rest are w10 - including main host

Hi folks

These days on Home computers this is a bit of a pain since anybody with a decent mobile phone and a 5G (or a slower 4G) connection can create their own access point which you really can't do anything about --apart from the fact that it will be those users who do this will have to pay their own bills !!! -- Kids as young as 7 these days are often conversant with this sort of thing so you also need to keep a handle on their mobile phone usage as well.

The only other sensible way is to set up a proxy server - but there again unless the computer users on these other machines can be prevented from having admin rights they can all change / edit internet parameters so again you might be on a hiding to nothing here.

This sort of thing is simple to control in a work space environment / office LAN etc - but quite difficult to control sensibly in a private home -- depending on the age of the users and the ownership of the "Client" Machines.

Some decent Routers can restrict Internet traffic by MAC address / other parameters so if you can get the MAC address of the LAN connections of your clients the router should be able to block traffic. Go to the router set up options -- usually logon to 192.168.1.1 or similar - the address will be in the router documentation -- and then look for things like security etc.

This of course won't stop Internet access via mobile phone access points of course though - but at least you won't be responsible for any problems with dubious software, piracy etc etc.

Cheers
jimbo

Hail Hail @Samuria !

Man, it's been an intense 48 hrs of back and forth just to understand - test/implement - document
such an apparently simple solution --

"Just give fixed ip with no default gateway job done"
-------------------------------------------------------
Hope this brief recap may help anyone else w/ a similar challenge + intent :

First I got a couple w7 machines talking to & sharing w/ each other
through basic Explorer > Properties > Sharing | Security settings --

NOT Homegroups - since they've been abandoned by MS going forward.

Then I got the w7 to see & share TO the w10 - but the w10 couldn't see/share TO the w7.

This took several steps to implement to lead to Success,
but perhaps the biggest lever was enabling SMB 1.0-CIFS CLIENT
on the w10 machine in "optionalfeatures.exe" so it can talk to w7.

Then the final super-sauce was indeed, using ipconfig /all to get the w10 ip + subnet,
then leaving "Default Gateway" BLANK, and using classic Google 8-8-8-8 & 8-8-4-4 for DNS.
--------------------------------------------
Before I mark "Solved" and Close, I'll be greedy and ask if someone has a script/.bat file
to toggle "Default Gateway" between router-default-issue and BLANK -- I'll surely appreciate it!

Now me & Guinness Extra Stout are gonna go for a walk, and then a nice rejuvenating sleep --

Cheers & Adios !