I want to make sure that user can only communicate with predefined host:tcp-port and cannot send network packets to anywhere else (something like `--uid-owner' in iptables). Does any of the firewalls support this? -- Regards, ASK