restrict access to certain (sub)interfaces

m4rtin · 03-14-2012, 09:16 PM

Let's say there are following interfaces in my server:

Code:

eth0
eth0:5
eth0:15
eth1
eth1:34

Is it possible to restrict certain users or groups to use one of those interfaces for outgoing traffic? How about inbound traffic?

acid_kewpie · 03-15-2012, 02:42 PM

how would you associate inbound traffic with a user? That makes literally no sense. Generally what you ask about outbound traffic is possible, using the iptables owner module, but generally it's just not done. I think it makes much more sense to back up and explain your situation and go forwards from there.