Solved

iptables rules per user or application

Posted on 2009-07-10
1
1,190 Views
Last Modified: 2013-11-16
I want to script some iptables rules only for a specific application like a personal firewall on windows, but the iptables module is not working on multicore CPUs.

Is there another way?

Commands like the following are not working on SMP systems:
iptables -A OUTPUT -m owner --uid-owner 315 -m state --state NEW -j ACCEPT
 

iptables -A OUTPUT -m owner --uid-owner 315 --cmd-owner firefox -p tcp -m multiport \

--dport 80,443 -m state --state NEW -j ACCEPT

Open in new window

0
Comment
Question by:D-CPA
1 Comment
 
LVL 27

Accepted Solution

by:
Nopius earned 250 total points
ID: 24823464
> Is there another way?

Probably yes, but not with iptables and not with such control grain as with IPtables. You can try to use SELinux network acl features.
http://selinux-symposium.org/2005/presentations/session2/2-2-morris.pdf

Don't ask me, I never tested it :-)
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Join & Write a Comment

I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
​Being a Managed Services Provider (MSP) has presented you  with challenges in the past— and by meeting those challenges you’ve reaped the rewards of success.  In 2014, challenges and rewards remain; but as the Internet and business environment evol…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now