I think that my need is for a "sandbox" to isolate a Window$ computer. I wish files on a machine running Window$ to be accessible to other computers in the LAN, while preventing the Window$ machine from accessing the Internet for http, ftp, email, etc. And, the Window$ machine must not be able to see or communicate with other machines in the LAN, except for file transfers initiated by the other machines. RLH