More information about your network could be necessary to provide an accurate answer, but if you want to restrict internet access on an ip-address basis, one way to do it would be using a proxy server.
---------------
Last Wiki Answer Submitted: November 9, 2010 3:35 pm by carlosdl63,535 pts.
If you live outside the United States, by submitting your email address you consent to having your personal data transferred to and processed in the United States.
It’s as simple as to do some scripting to synchronize the DHCP reserved addresses and your firewall rules…
Sounding simple, but when DHCP server and firewall are on different hosts which run different OSes, it’ll take more than some scripting.
And if the firewall is some kind of appliance which is advertised “to do a single task but do it well” (which is a good thing, basically) and running scripts to communicate with other hosts is “a second task” which the appliance can’t do… In this case probably you’ll have to resort to put a second gateway/firewall with “real OS”-based firewall (considered a bad thing by many).
You could even do it on your router or firewall but would need more information for a definitive answer.
It’s as simple as to do some scripting to synchronize the DHCP reserved addresses and your firewall rules…
Sounding simple, but when DHCP server and firewall are on different hosts which run different OSes, it’ll take more than some scripting.
And if the firewall is some kind of appliance which is advertised “to do a single task but do it well” (which is a good thing, basically) and running scripts to communicate with other hosts is “a second task” which the appliance can’t do… In this case probably you’ll have to resort to put a second gateway/firewall with “real OS”-based firewall (considered a bad thing by many).
Good luck,
Petko