Kernel 2.4.26, slack 8.0: blocking outgoing traffic

coindood · 06-03-2004, 08:46 PM

I know you can block all outgoing traffic with iptables, but is there any other way of doing it?

kbcnetau · 06-03-2004, 09:45 PM

Unplug the network cable :-)

Seriously, what are you trying to achieve?

If we literally prevented any packets from going out, we wouldn't be getting any in either, as TCP/IP is a two-way protocol.

Give us an idea of your application...

coindood · 06-03-2004, 09:54 PM

I am creating a shell server, but I don't want any outgoing connections (like ssh, telnet, wget, ping, mail, etc) from working in case it gets compromised. Many shell servers do this.

kbcnetau · 06-03-2004, 10:15 PM

Various servers can be individually configured to accept traffic from only specified hosts, but the firewall solution would be my preferred option for ease of management.

You may like to refer to this article on hosts.allow (and hosts.deny), which is used to control access to certain daemon processes:
<http://linux.about.com/library/cmd/b...osts.allow.htm>