Re: block a program from access the Internet.

2013-09-11 Thread Jeffrin Jose
On Mon, Sep 09, 2013 at 11:01:38AM -, atar wrote: > Hi there!! > > Just wanted to know please if there's a way to block a specific > program from accessing the Internet while preserving at the same > time the ability of other programs to access the Internet, and if > there's a way, so how? ma

Re: block a program from access the Internet.

2013-09-10 Thread Lars Noodén
On 10.09.2013 01:54, Pascal Hambourg wrote: > Lars Noodén a écrit : >> >> Vincent's link suggests that --cmd-owner was removed from iptables >> entirely. > > Actually it was removed from the kernel part of iptables, not from the > iptables userland. > >> It would be important to find a more autho

Re: block a program from access the Internet.

2013-09-09 Thread Pascal Hambourg
Lars Noodén a écrit : > > Vincent's link suggests that --cmd-owner was removed from iptables > entirely. Actually it was removed from the kernel part of iptables, not from the iptables userland. > It would be important to find a more authoritative source on > that like the netfilter list or the

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 10.09.2013 00:36, atar wrote: > Lars wrote: > >> One possible explanation might be SMP: >> >> $ uname -a >> Linux debian 3.2.0-4-686-pae #1 SMP Debian 3.2.41-2+deb7u2 i686 GNU/Linux >> >> Regards, >> /Lars > > Sorry, but what's your meaning by 'SMP'? > > Regards, > > atar. > > Ken's messag

Re: block a program from access the Internet.

2013-09-09 Thread atar
Lars wrote: One possible explanation might be SMP: $ uname -a Linux debian 3.2.0-4-686-pae #1 SMP Debian 3.2.41-2+deb7u2 i686 GNU/Linux Regards, /Lars Sorry, but what's your meaning by 'SMP'? Regards, atar. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject

Re: block a program from access the Internet.

2013-09-09 Thread Vincent Lefevre
On 2013-09-09 15:50:10 +0300, Lars Noodén wrote: > So somewhere between the 1.3.5 and 1.4.14, the capability disappeared Yes, according to http://unix.stackexchange.com/questions/32264/per-process-firewall --cmd-owner was removed because it didn't work properly. -- Vincent Lefèvre - Web:

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:58, ken wrote: > On 09/09/2013 05:54 AM Lars Noodén wrote: >> On 9/9/13 3:14 PM, atar wrote:> Thanks for replying! >>> >>> Unfortunately, when invoking the 'iptables' command with the arguments >>> you've suggested, the program says: >>> iptables v1.4.14: unknown option "--cmd

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:58, ken wrote: > On 09/09/2013 05:54 AM Lars Noodén wrote: >> On 9/9/13 3:14 PM, atar wrote:> Thanks for replying! >>> >>> Unfortunately, when invoking the 'iptables' command with the arguments >>> you've suggested, the program says: >>> iptables v1.4.14: unknown option "--cmd

Re: block a program from access the Internet.

2013-09-09 Thread ken
On 09/09/2013 05:54 AM Lars Noodén wrote: On 9/9/13 3:14 PM, atar wrote:> Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option "--cmd-owner" Try `iptables -h' or 'iptables --help' for m

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 9/9/13 3:14 PM, atar wrote:> Thanks for replying! > > Unfortunately, when invoking the 'iptables' command with the arguments > you've suggested, the program says: > >> iptables v1.4.14: unknown option "--cmd-owner" >> Try `iptables -h' or 'iptables --help' for more information. > > Regards! > >

Re: Re: block a program from access the Internet.

2013-09-09 Thread atar
Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option "--cmd-owner" Try `iptables -h' or 'iptables --help' for more information. Regards! atar. -- To UNSUBSCRIBE, email to debian-u

Re: block a program from access the Internet.

2013-09-09 Thread Claudius Hubig
Dear atar, atar wrote: > Just wanted to know please if there's a way to block a specific program > from accessing the Internet while preserving at the same time the ability > of other programs to access the Internet, and if there's a way, so how? AppArmor and SELinux likely have such feature

Re: block a program from access the Internet.

2013-09-09 Thread Diogene Laerce
Just wanted to know please if there's a way to block a specific program from accessing the Internet while preserving at the same time the ability of other programs to access the Internet, and if there's a way, so how? iptables my friend.. If it's a known program, try gufw in the repositories :

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:01, atar wrote: > Hi there!! > > Just wanted to know please if there's a way to block a specific program > from accessing the Internet while preserving at the same time the > ability of other programs to access the Internet, and if there's a way, > so how? > > Thanks in advance!!