> For example, how would one block all outgoing traffic from any program under ~/.wine You can't do that AFAIK. iptables can block outgoing traffic based on user/group ID (at least with Shorewall fronting it). But this has nothing to do with Wine, so you'd be better off asking on an iptables-specific firewall mailing list/forum. -r
