Routing to Internet with no default route

[hadbihas]

How can I route to Internet without defining a default route to Internet. I have a web server behind a VPN router that would like it to be accessed on the Internet, but I don't want to add a default route to the internet on the router.

Thanks,

IH

[smalkeric]

To the best of my knowledge, this time you can use the static routing rather than default routing. It increases more security and as well as it will help to track any routes. You can define the routes for incoming as well as outgiong to internet.

[smif101]

I am not sure why you don't want a default route on the router to access the internet. But if you want it such a way that only your router knows only to go to a certain network you could do that. For instance, say behind your router you run the network 10.1.1.0/24 and the connection to your ISP is in the network 10.1.2.0/24 and you only want customers on another network, 192.168.1.0/24 to reach your server. Than using a static router such as

ip route 192.168.1.0 255.255.255.0 10.1.2.1

will allow you that kind of access. But remember your isp is still going to route packets destined to your router for the network you own, you just won't know how to reach it so it will drop the packets on the return trip.