Hi all

i'm goint to install a system with Cent OS 5.3 A remote user will access to the system using SSH. Here is my question:

Once the user is logged on, how can I prevent that this user has no acces to the local network (in a workgroup) but mantaining the access to internet?

Explaining it, i want to have user with access without access to our LAN (no proxy available) but having external connectivity (internet, ssh, ftp...). The idea is provide a system to external users preventing them access to our LAN

In adition, this user, will need sudo permissions to install/uninstall applications

thanks for your responses and ideas

I guess you'd put the box in a DMZ. That way you can block access to the LAN and make it available to the WAN.

iptables is the tool to use. Shorewall is a great "frontend" to iptables.