Hey everybody!

Does someone know a solution to how to configure a linux firewall to application specific settings? I mean that if I know that the application is safe, I would want to enable him to open any kind of ports regardless of any other firewall settings.
The solution behind all this I think is in some magical kernel module that intercepts the interrupt when the program want's to write to a socket, verifies if this can be done and then grant permission to execute the operation.

So, I know it's a complicated feature but...
Does anyone have any ideas, where can I find such a module or such application?

Respect,
X

Unless your needs are fairly sophisicated, you're probably making more out of this than necessary. Presumably, you want to do something like using a filesharing program, and you want specific ports for it to use.

Number one, if you have a router, you'll need to open ports in it, or disable it's firewall.

Number two, install the firewall gui application best suited to your desktop (Firestarter-Gnome, Guarddog-KDE)

Again, if you have really sophisticated needs, ignore this and try to get help from firewall experts. But I think you'll have to be considerably more specific about your question to attract interest from them.

Does someone know a solution to how to configure a linux firewall to application specific settings? I mean that if I know that the application is safe, I would want to enable him to open any kind of ports regardless of any other firewall settings.
Sounds a bit like Systrace though that's prolly more than you want...

I'm not over complicating my self. That's what I really want to do! I've used windows before - aprox. an year ago -, and some commercial firewalls can do this... I can specify some applications as "TRUSTED"; from that moment on, that specific application would have access to all of the ports, and only asking for permission for very specific high risk port operations.

I would want this behavior on linux... Normal (static) firewall rules isn't good for me because the apply a rigid packet filtering, regardless of applications. Packet shaping firewalls are not good either because they: use a lot of resources and they only recognize package types, and I can't assign package type to specific applications.

I think that associating packages with applications It can only be done @ kernel level, and not in the Application layer - as packet shaping does - because only at that level you have full control of interrupts and I/O operations.

So my quest still remain to find a "application/module" that can do the job I'm asking.
Hope that I've been more specific now.

Regards,
X

I think that Systrace is the "correct" answer to my question! Thanx!