Posted
by santhosh
on Super User
See other posts from Super User
or by santhosh
Published on 2009-11-29T08:32:31Z
Indexed on
2010/04/05
6:03 UTC
Read the original article
Hit count: 254
how to block a user from accessing internet in linux.
Is the following command correct.
iptables -A OUTPUT -p tcp --dport 80,443 -m owner --uid-owner $USERNAME -j DROP
© Super User or respective owner
as seen on Server Fault
- Search for 'Server Fault'
It does not happen often, but sometimes after running the below script, checking the iptables with service iptables status shows that they weren't updated and the script doesn't output any error.
The iptables is structured as look-up tree (long repeated sections snipped):
#!/bin/sh
iptables -t…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
sudo chkconfig iptables off
/etc/init.d/iptables on
### Clear/flush iptables
sudo iptables -F
sudo iptables -P INPUT ACCEPT
sudo iptables -P OUTPUT ACCEPT
sudo iptables -P FORWARD ACCEPT
### Allow SSH
iptables -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
Hi all,
I'm setting up port forwarding for an L2TP VPN connection to the local Windows 2003 VPN server. The router is a simpel Debian machine with iptables. The VPN server works perfect. But I cannot log in from the WAN. I'm missing something.
The VPN server is using a pre-shared key (L2TP) and…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I have three computers, linked like this:
box1 (ubuntu) box2 router & gateway (debian) box3 (opensuse)
[10.0.1.1] ---- [10.0.1.18,10.0.2.18,10.0.3.18] ---- [10.0.3.15]
|
box4, www
[10.0.2.1]
Among other…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I was thinking initially needing to do a reverse proxy or something so I could get some SSL/TLS traffic look like it is being terminated at a server and IP address in the AWS cloud, and then that traffic is forwarded onto our actual web servers that aren't in the cloud...
I've not done much iptables…
>>> More
