/dev/rob0 wrote: > Note that OUTPUT filtering only controls non-root users. A root user can > disable or bypass it. If you have local shell users who cannot be > trusted, and if you didn't already understand all this, chances are > those users already have rooted you. :) Quite so, but output filtering can also be applied to a firewall/router/bridge with no user accounts. Amin
