Disable internet access on host?

[rando]

Is there any way to disable internet access on a Windows XP host while allowing internet access in a Linux guest? For example, on XP I can remove the default gateway from the tcp settings, effectively making the computer incapable of web browsing.

[Perryg]

Humm, interesting question. Have you tried to use the firewall and shut down all ports?

[rando]

Still kind of in the experimental stage. My end goal is to make it impossible for users to surf the net in the host, but only in the (more secure and easily replaceable) Linux guest. But if I shut ports on the host firewall, I would think that would block the guest as well, no?

[SecretCode]

Interesting question, indeed. I did something like this a while ago with ... possibly vmware, can't remember. By disabling dhcp and setting an invalid IP address on the XP host's NIC I got something like that to work. Sorry, I can't confirm any of the details.

What access will these users have - are they physically at the box? Will they be able to the XP host's GUI? With a limited or administrator account?