Network filters to control internet access

[trump26901]

I have a sbs2k3 std. server running with 2 NIC acting as a NAT/VPN.

I have set up the internal network to assign static IP addresses that
cannot be changed by users.

what I would like to know is how can I set the filters on either the
Intranet or Internet NIC card to stop specific IPs from getting
internet access.

As a side note, I would like to allow some computers to not have full
internet access, but have access to two external IP addresses to send
and recieve e-mails.

I tried putting a default exclude filter to the Internet outbound NIC,
that way only IPs that I allow to have access would work, but I seemed
to shut off my internet in general. This computer also handles VPN
connections, so that is important for it to function too.

 

[Doug Sherman [MVP]]

If a computer is configured with no default gateway or an incorrect default
gateway, it will be unable to reach the Internet. If you wanted such a
computer to be able to reach only 2 Internet addresses, add static routes:

route -p add <DestinationIP> mask 255.255.255.255 <LANIPofSBS>

Doug Sherman
MCSE, MCSA, MCP+I, MVP