only allow certain ip's

Pengoo · 06-04-2009, 07:17 AM

Ive got a debian server setup and using the proxy tunnel option of putty.

Alls working 100%, however, how can i block or only allow certain websites/ips without blocking the server itself?

Or

Blocking/allowing based in usergroup

Thanx!

JulianTosh · 06-04-2009, 09:37 AM

man iptables for details on filtering based on uid/gid

battletroll · 06-04-2009, 10:18 AM

Also look into tcp-wrappers

/etc/hosts.allow & /etc/hosts.deny

Pengoo · 06-04-2009, 03:17 PM

Ive created a group called sllusers (GID = 102)
and a user (trial) which belongs to this group

Putty socks5 tunnel

Now logging into the server, they have FULL access.

So ... i assume using iptables and the gid i can start allowing access to ip ranges and ports.

iptables -A OUTPUT -p tcp --dport 3128 --gid-owner 102

But it doesnt work ...

iptables v1.3.6: Unknown arg `--gid-owner'

Any ideas?

Pengoo · 06-04-2009, 04:33 PM

Got it working !!!

tnks for direction