Hello, Since kernel 2.6.15, command owner matching is gone (-m owner --cmd-owner). I consider this match vital for securing a workstation. Programs are calling home (including well known very free source ones), emails contain all kinds of tricks to report back (some of them I cannot delete unseen), some programs are simply too insecure to be alowed to connect to some server (e.g. media players), and often I simply want my workstation to be absolutely quiet (except when I specificly ask for something). How can I lock my workstation down on application level? Please tell me Netfilter can do this. Or can't it?
