only allow certain ip's
 

Ive got a debian server setup and using the proxy tunnel option of putty.

Alls working 100%, however, how can i block or only allow certain websites/ips without blocking the server itself?

Or

Blocking/allowing based in usergroup

Thanx!

man iptables for details on filtering based on uid/gid

Also look into tcp-wrappers

/etc/hosts.allow & /etc/hosts.deny

Ive created a group called sllusers (GID = 102)
and a user (trial) which belongs to this group

Putty socks5 tunnel

Now logging into the server, they have FULL access.

So ... i assume using iptables and the gid i can start allowing access to ip ranges and ports.

iptables -A OUTPUT -p tcp --dport 3128 --gid-owner 102

But it doesnt work ...

iptables v1.3.6: Unknown arg `--gid-owner'

Any ideas?

Got it working !!!

tnks for direction