Arch Linux

solarwind

Member

From: Toronto

Registered: 2008-03-18

Posts: 546

Application Firewall

On Windows, I have used application firewalls like ZoneAlarm which can set internet access on a per-application basis. You can control exactly how what internet access an application gets (access to net, trusted, server to net, trusted for example).

Is there anything like this for Linux at all? At least is there anything I can use to prevent certain applications from accessing the internet?

Or is there a way to make another user and disable ALL internet access for that user? I'm trying to run a program and I do NOT want to give it internet access. Actually several programs.

Last edited by solarwind (2008-09-14 04:30:46)

Allan

Pacman

From: Brisbane, AU

Registered: 2007-06-09

Posts: 11,597

Website

Re: Application Firewall

You could have a look at Firestarter of Guard Dog but I am not sure that they work on an application basis, just by port.

---

PGP Key: F99FFE0FEAE999BD | I develop pacman - buy me a drink!

lucke

Member

From: Poland

Registered: 2004-11-30

Posts: 4,019

Re: Application Firewall

There was a thing like that (tux-sth?), but can't remember the name and can't google it.

-edit-

Ah, this one. http://tuxguardian.sourceforge.net/

Apparently hasn't been updated, I don't know how well it works.

Last edited by lucke (2008-09-14 08:47:04)

pelle.k

Member

From: Åre, Sweden (EU)

Registered: 2006-04-30

Posts: 667

Re: Application Firewall

I'm not sure on what level you linux knowledge is, but this blog post makes things a bit clearer;
http://liquidat.wordpress.com/2007/07/1 … -on-linux/
Apart from using iptables (if you're up to the task), none of the suggested solutions are included in the repos nor AUR.
Also, on a side note, you could implement something like this using fireHOL (it supports iptables syntax), wich is just a easy-to-use frontend to iptables really.

Also, i found this (if you just want to block a user);
http://www.cyberciti.biz/tips/block-out … ables.html

iptables -A OUTPUT -o eth0 -m owner --uid-owner {USERNAME} -j DROP

Never tried that before, but it seems straight forward.

---

"Your beliefs can be like fences that surround you.
You must first see them or you will not even realize that you are not free, simply because you will not see beyond the fences.
They will represent the boundaries of your experience."
SETH / Jane Roberts