Re: iptables & programs

2006-03-14 Thread Andrew Cady
On Tue, Mar 14, 2006 at 03:13:41PM +0100, Dennis Stosberg wrote: > Pol Hallen wrote: > > > i'd like block the internet connection on these programs ;-) > > > > which better solution of this problem? > > Create an additional user account and run those programs with that > user's rights only. Then

Re: iptables & programs

2006-03-14 Thread Pol Hallen
> Create an additional user account and run those programs with that > user's rights only. Then use the iptables "owner" module to > restrict outgoing connections made by that user. > > See "-m owner" and "--uid-owner" in the iptables manual page for > details. Very very thanks! ;-) Pol -- To

Re: iptables & programs

2006-03-14 Thread Dennis Stosberg
Pol Hallen wrote: > i'd like block the internet connection on these programs ;-) > > which better solution of this problem? Create an additional user account and run those programs with that user's rights only. Then use the iptables "owner" module to restrict outgoing connections made by that u

iptables & programs

2006-03-14 Thread Pol Hallen
Hi all :-) i installed several program in wine emulation i'd like block the internet connection on these programs ;-) which better solution of this problem? I think is not a good idea run tcpdump 4 sniff whole trafic of this programs.. and is possible that program can connect to several host or