On 29 July 2010 20:09, Elmar Stellnberger <estellnb@xxxxxxxxx> wrote: > > > I need to block network access for certain users/groups, fully: > > iptables -A mychain -m owner --gid-owner blockedusergroup -j DROP > Err... I know this is stating the obvious but your output chain does jump to the mychain at some point doesn't it ;) Also some apps remember do not run with the groupid of the person who launched the application - gid-owner matches the *effective* group id of the process. -- Richard Horton Users are like a virus: Each causing a thousand tiny crises until the host finally dies. http://www.pbase.com/arimus - My online photogallery http://www.richardhorton.info -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
