LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
Search this Thread
Old 04-03-2004, 03:24 PM   #1
kyleinc
LQ Newbie
 
Registered: Apr 2004
Distribution: Red Hat 9
Posts: 9

Rep: Reputation: 0
Question User Group for Restricting Internet Access


I am using Red Hat 9. I would like to create a user group on my computer that would have no access to the Internet. I would like all other user groups to continue to be able to access the Internet. How would I set this up?
 
Old 04-03-2004, 04:04 PM   #2
kev82
Senior Member
 
Registered: Apr 2003
Location: Lancaster, England
Distribution: Debian Etch, OS X 10.4
Posts: 1,263

Rep: Reputation: 50
i dont know how redhat configures firewalls but according to my iptables man page there is a module called owner which can match packets on uid, gid, and pid. which is what you want but it is labelled experimental so i cant guarantee it working.

assuming everythings set up in your kernel and your iptables supports this module then something along the lines of

iptables -A OUTPUT -m owner --gid-owner [insert group id] -j DROP

will drop all packets coming from programs running with that group id. but as i know nothing about redhat i cant give you anything more specific.
 
Old 04-16-2004, 03:51 PM   #3
kyleinc
LQ Newbie
 
Registered: Apr 2004
Distribution: Red Hat 9
Posts: 9

Original Poster
Rep: Reputation: 0
When I did this, the users in that group could not log in. It just hanged after the log in screen.
 
Old 04-16-2004, 04:50 PM   #4
SciYro
Senior Member
 
Registered: Oct 2003
Location: hopefully not here
Distribution: Gentoo
Posts: 2,038

Rep: Reputation: 51
does redhat use the network device to login or boot up?
 
Old 04-16-2004, 05:08 PM   #5
kyleinc
LQ Newbie
 
Registered: Apr 2004
Distribution: Red Hat 9
Posts: 9

Original Poster
Rep: Reputation: 0
I honestly am not sure. I know that when the OS is booting up before the log in screen it mentions bringing up the eth0 and iptables firewall. However, I don't know what it does after one logs in.
 
Old 04-16-2004, 07:47 PM   #6
SciYro
Senior Member
 
Registered: Oct 2003
Location: hopefully not here
Distribution: Gentoo
Posts: 2,038

Rep: Reputation: 51
hmm, well i don't know how redhat handles login's, but maybe you'll have to change that iptables rule to allow everyone to use address 127.0.0.1 , but I'm not sure...
 
Old 04-17-2004, 05:49 AM   #7
kev82
Senior Member
 
Registered: Apr 2003
Location: Lancaster, England
Distribution: Debian Etch, OS X 10.4
Posts: 1,263

Rep: Reputation: 50
SciYro souns like he has the right idea, do something like

iptables -I OUTPUT -o lo -j ACCEPT

i would suggest reading some of the howto's at http://www.netfilter.org/ because writing your own firewall script isnt an easy task.

Last edited by kev82; 04-17-2004 at 05:53 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
samba : access denied for some user in same NT group on a folder mtrento Linux - Networking 0 06-27-2005 10:01 AM
restricting internet access bobbens Linux - Networking 2 02-08-2005 07:29 AM
User and Group Access to Folders nutthick Linux - Security 5 12-19-2004 07:22 PM
reboot so user can access fs space limited by group recently added to? bdp Linux - General 4 09-27-2003 01:21 AM
User and Group access restrictions? KendersPlace Linux - Security 1 08-20-2003 05:32 PM


All times are GMT -5. The time now is 07:15 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration