Linux - GeneralThis Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
I am using Red Hat 9. I would like to create a user group on my computer that would have no access to the Internet. I would like all other user groups to continue to be able to access the Internet. How would I set this up?
i dont know how redhat configures firewalls but according to my iptables man page there is a module called owner which can match packets on uid, gid, and pid. which is what you want but it is labelled experimental so i cant guarantee it working.
assuming everythings set up in your kernel and your iptables supports this module then something along the lines of
iptables -A OUTPUT -m owner --gid-owner [insert group id] -j DROP
will drop all packets coming from programs running with that group id. but as i know nothing about redhat i cant give you anything more specific.