LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-01-2007, 02:35 AM   #1
rsathishkumarr
LQ Newbie
 
Registered: Aug 2007
Posts: 1

Rep: Reputation: 0
disable Internet access


How to deny internet access to all the users other than root user, all the users are NIS users. It should not block accessing to the local area networks.
 
Old 08-01-2007, 03:08 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
well root should *never* have internet access, as that implicitly creates a substantial security risk. I guess the simplest way to achieve what you are directly trying to do is to enforce the use of a local proxy, assuming you mean web access, not full internet access. if that's not an option then within a single machine you could use the owner module to only permit network connections by certain users.

iptables -A OUTPUT -p tcp -m owner ! --uid-owner root -j REJECT

reject all packets which are trying to leave the box not created by a process owned by root.

Last edited by acid_kewpie; 08-01-2007 at 03:09 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Disable root access... firehydra2k Linux - Newbie 5 03-27-2007 02:19 AM
How Do I Disable Ssh Access? 2kau Linux - Software 1 09-08-2006 04:05 PM
disable internet access to server jonfa Linux - Networking 3 06-24-2005 03:11 PM
I lose ftp access when I disable shell access for user captainObvious Linux - General 3 11-13-2004 06:49 PM
Disable Shell Access Manuel-H Linux - Software 3 06-22-2003 12:06 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:47 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration