> Is there any way to block/allow traffic generated by or toward a > spcific application. I want to block/allow traffics based on the full > pathname of the application. I believe that only the owner target does userspace matching at this point. It seems like an interesting idea like zonealarm, but I imagine the actual rule implementation would make this difficult for the users you'd be protecting. You'd be forced to setup a block-all with whitelist. Since there are so many Linux apps that need direct network access to function..