Control outbound access on a per-application level

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



An application in Windoze called Personal Firewall does this. IT somehow
does an checksum on the .exe file and then compares, but it is a user-lev=
el
firewall and not kernel level.

Gustav Svensson said:
> Is it possible to set "outbound" rules based on what binary application
> it is that wants to access the Internet?
> Just like what I'm used to when I run win32. In every firewall
> application there, I get a message when some program is trying to
> access the internet. Then I can decide whether to procede the action,
> or block it. On Linux I see nothing like this. I'm having a concern
> with the RealPlayer. I would like to block it to reach any other
> addresses but those to my favourite stations.
> Sure, I could set up a rule for the port that RealPlayer is supposed to
> use, but what guarantee do I have that it isn't capable of using some
> other port, like 80 for example? Assume it does use the port 80. Then
> it would be imposible to stop without a rule like mentioned here.
> Because I would want Galeon to have access to any address on port 80,
> so I have to leave it wide open. It would be better if I could allow
> this privilege to Galeon only, not to any program that uses port 80. Is
> this feasible, if so how?
>
> Gustav
> ______________________________________________________
> H=E4r b=F6rjar internet!
> Skaffa gratis e-mail och internet p=E5 Spray http://www.spray.se




Regards,

Cyberdude Murli
The Earth





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux