lkml.org 
[lkml]   [1996]   [Jun]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Ideas for v2.1
Date
> There are already some patches for per user accointing. I'd like to
> have per user firewall as well.

To an extent thats not hard because you can tell who owns a given socket.
Its not possible to assign an ownership to things like retries, acks, icmp
messages etc very easily however.

For the basic "user xxx no net access", "user yyy local only" you can
probably set up such an arrangement with minimal firewall hacking. You can
also write your own loadable firewall modules rather than further hack on
the main ip firewall and that would probably be the clean approach.

Alan


\
 
 \ /
  Last update: 2005-03-22 13:37    [W:0.071 / U:0.536 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site