Posted
by santhosh
on Super User
See other posts from Super User
or by santhosh
Published on 2009-11-29T08:32:31Z
Indexed on
2010/04/05
8:23 UTC
Read the original article
Hit count: 294
How do I block a user from accessing the internet under Linux?
I'm trying the following:
iptables -A OUTPUT -p tcp --dport 80,443 -m owner --uid-owner $USERNAME -j DROP
Is that the right syntax or command?
© Super User or respective owner
as seen on Ask Ubuntu
- Search for 'Ask Ubuntu'
I've got a problem with apt-get update and apt-get install ... commands .
every time update or installing fails and errors are :
Get:1 http://dl.google.com stable Release.gpg [198B]
Ign http://dl.google.com/linux/chrome/deb/ stable/main Translation-en_US
Get:2 http://dl…
>>> More
as seen on Ask Ubuntu
- Search for 'Ask Ubuntu'
sh@ubuntu:/home/ccpp/helloworld$ make
gcc-4.6 -O2 -DMODULE -D_KERNEL_ -W -Wall -Wstrict-prototypes -Wmissing-prototypes -isystem /lib/modules/`uname -r`/build/include -c -o hello-1.o hello-1.c
hello-1.c:4:0: warning: "MODULE" redefined [enabled by default]
<command-line>:0:0: note: this is…
>>> More
as seen on Ask Ubuntu
- Search for 'Ask Ubuntu'
I am having trouble accessing the several critical header files that show to be a part of the build process.
The "Ubuntu Software Center" shows "Build Essentials" as installed:
Next I did the following two commands, which did not improve the problem:
~$ sudo apt-get install build-essential
[sudo]…
>>> More
as seen on Super User
- Search for 'Super User'
I'm trying to update my Debian machine to 2.6.32-46 (which is the new stable). However, after doing apt-get update my apt-cache search linux-image shows me:
linux-headers-2.6.32-5-486 - Header files for Linux 2.6.32-5-486
linux-headers-2.6.32-5-686-bigmem - Header files for Linux 2.6.32-5-686-bigmem
linux-headers-2…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I'm helping out with a project for an embedded device that only has USB and no serial. This device is running Linux.
These days, when we need to connect to a serial port on a device we typically use a USB to serial adapter (on something like a phone system or a load balancing device, etc). I would…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
It does not happen often, but sometimes after running the below script, checking the iptables with service iptables status shows that they weren't updated and the script doesn't output any error.
The iptables is structured as look-up tree (long repeated sections snipped):
#!/bin/sh
iptables -t…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
sudo chkconfig iptables off
/etc/init.d/iptables on
### Clear/flush iptables
sudo iptables -F
sudo iptables -P INPUT ACCEPT
sudo iptables -P OUTPUT ACCEPT
sudo iptables -P FORWARD ACCEPT
### Allow SSH
iptables -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
Hi all,
I'm setting up port forwarding for an L2TP VPN connection to the local Windows 2003 VPN server. The router is a simpel Debian machine with iptables. The VPN server works perfect. But I cannot log in from the WAN. I'm missing something.
The VPN server is using a pre-shared key (L2TP) and…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I have three computers, linked like this:
box1 (ubuntu) box2 router & gateway (debian) box3 (opensuse)
[10.0.1.1] ---- [10.0.1.18,10.0.2.18,10.0.3.18] ---- [10.0.3.15]
|
box4, www
[10.0.2.1]
Among other…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I was thinking initially needing to do a reverse proxy or something so I could get some SSL/TLS traffic look like it is being terminated at a server and IP address in the AWS cloud, and then that traffic is forwarded onto our actual web servers that aren't in the cloud...
I've not done much iptables…
>>> More
