restrict net access

anubhuti_k · 02-14-2005, 11:25 PM

Hi thr
I have fedora core2 and two accounts, root & student.
I want that internet is accessed only through root & not student.
how is that possible.
regrds

fr_laz · 02-15-2005, 03:57 AM

Hi,

there's user matching support in iptables :
iptables -A OUTPUT -p tcp --dport 80 -m owner ! --uid-owner 0 -j ACCEPT

(beware, the line above allows all users except root to use dport 80, because of the !)

it should answer your quesiton... if you do not know what is iptables, then :
http://www.netfilter.org/documentation/index.html

Bye

shivaligupta · 02-15-2005, 07:58 AM

hi

i m also facing the same problem.
I have tried :
iptables -A OUTPUT -p tcp --dport 80 -m owner ! --uid-owner 0 -j ACCEPT

but it doesn't work. what i did is i wrote this command on Konsole. logout & then tried to access internet from all the accounts(including root, student & faculty) & i was able to access it. i hav also tried after clearing history & cache.
what i want is that internet shud be accessible from root & faculty account but not from students's account. on a particular pc in network

Oliv' · 02-15-2005, 04:09 PM

have a look at this site: http://www.nufw.org/