Deny access from localhost to internet.....
mlt01 at mlists.homeunix.com
Sat Sep 29 19:50:11 PDT 2007
On Sun, 30 Sep 2007 02:22:42 +0200
Sten Daniel Soersdal <netslists at gmail.com> wrote:
> Agus wrote:
> > Hi guys,
> > How are you today?
> > The question is this..I want to restrict external access, that is
> > from my BSD to the internet, to some groups of users. Other groups
> > i want to access internet normally. I dont want this group of users
> > to be able to establish connections to the internet but yes to the
> > internal systems on the LAN...
> > Is this possible without hacking the kernel?
> > Thanks and salutes for all
> You want to restrict internet, but not LAN, access for certain users
> logged into your BSD box?
> man ipfw ( look for "uid" and "gid" )
> man pf ( look for "user" and "group" )
Danger Will Robinson!
Don't do that unless you've read the bugs sections of the ipfw
and pf.conf man pages.
More information about the freebsd-questions