F5F Stay Refreshed Power Users Networks Yes, you can configure a computer to connect to your local network while restricting access to the internet.

Yes, you can configure a computer to connect to your local network while restricting access to the internet.

Yes, you can configure a computer to connect to your local network while restricting access to the internet.

M
mittepat
Junior Member
3
07-06-2016, 04:38 PM
#1
You have a 2007 Mac Mini sitting idle and you're aiming to convert it into a server for time machine backups on your local network. The Mac OS X version running is quite old and poses security risks, but you're looking to avoid connecting it to the internet while still using LAN connectivity. You also want to take advantage of features like screen sharing. This setup should work seamlessly over your local network, just like Time Machine, without needing an external drive.
M
mittepat
07-06-2016, 04:38 PM #1

You have a 2007 Mac Mini sitting idle and you're aiming to convert it into a server for time machine backups on your local network. The Mac OS X version running is quite old and poses security risks, but you're looking to avoid connecting it to the internet while still using LAN connectivity. You also want to take advantage of features like screen sharing. This setup should work seamlessly over your local network, just like Time Machine, without needing an external drive.

I
ivan_13LP
Junior Member
11
07-06-2016, 05:54 PM
#2
Use a firewall with whitelisted local IP addresses and block all other traffic.
I
ivan_13LP
07-06-2016, 05:54 PM #2

Use a firewall with whitelisted local IP addresses and block all other traffic.

F
frallan03
Junior Member
5
07-07-2016, 01:01 PM
#3
Alternatively, if your router offers parental settings, you can utilize those.
F
frallan03
07-07-2016, 01:01 PM #3

Alternatively, if your router offers parental settings, you can utilize those.

P
Pugsleyluva51
Junior Member
7
07-07-2016, 01:38 PM
#4
Probably I’d have to disable all incoming connections, but will the network sharing remain functional?

Note: This screenshot comes from my laptop, though the preferences panel looks identical on the older Mac Mini version.
Edited February 1, 2020 by Twilight
P
Pugsleyluva51
07-07-2016, 01:38 PM #4

Probably I’d have to disable all incoming connections, but will the network sharing remain functional?

Note: This screenshot comes from my laptop, though the preferences panel looks identical on the older Mac Mini version.
Edited February 1, 2020 by Twilight

I
iasdd177
Member
136
07-21-2016, 07:02 PM
#5
Generally, you should restrict all incoming traffic and permit only local network connections (like 192.168.0.*). It’s unclear if the system has an inbuilt IP whitelist, so a third-party firewall might be necessary.
I
iasdd177
07-21-2016, 07:02 PM #5

Generally, you should restrict all incoming traffic and permit only local network connections (like 192.168.0.*). It’s unclear if the system has an inbuilt IP whitelist, so a third-party firewall might be necessary.

M
Moritz0702
Member
103
07-21-2016, 07:38 PM
#6
Yes, it should be safe to use it on the network.
M
Moritz0702
07-21-2016, 07:38 PM #6

Yes, it should be safe to use it on the network.

S
Simon_303
Member
169
07-22-2016, 04:48 PM
#7
Yes, unless harmful entities are present on your local network.
S
Simon_303
07-22-2016, 04:48 PM #7

Yes, unless harmful entities are present on your local network.

J
Jarzzermann
Posting Freak
788
07-22-2016, 06:30 PM
#8
As long as it isn’t actively connected to something online, the risk shouldn’t be high. The main concern is using a web browser on it, so avoid that. You don’t necessarily need to adjust the firewall settings to block it—actually, that approach is poor because the device will still attempt to connect, which could lead to instability in the OS or software. Instead, assign a static IP address and leave the gateway or DNS fields blank so it won’t try to go online. Ideally, keep its IP reserved on the DHCP server but outside the DHCP range to prevent other devices from accessing it.
J
Jarzzermann
07-22-2016, 06:30 PM #8

As long as it isn’t actively connected to something online, the risk shouldn’t be high. The main concern is using a web browser on it, so avoid that. You don’t necessarily need to adjust the firewall settings to block it—actually, that approach is poor because the device will still attempt to connect, which could lead to instability in the OS or software. Instead, assign a static IP address and leave the gateway or DNS fields blank so it won’t try to go online. Ideally, keep its IP reserved on the DHCP server but outside the DHCP range to prevent other devices from accessing it.

I
IIBoBBy
Junior Member
3
07-23-2016, 01:26 PM
#9
Set it to a static IP without a gateway. It has a link to your LAN, but no external routing. You might also configure ACLs on that specific host inside the router for extra protection, though it would add unnecessary steps.
I
IIBoBBy
07-23-2016, 01:26 PM #9

Set it to a static IP without a gateway. It has a link to your LAN, but no external routing. You might also configure ACLs on that specific host inside the router for extra protection, though it would add unnecessary steps.