From owner-freebsd-questions@FreeBSD.ORG  Sun Apr  2 16:33:14 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ECD5F16A420
	for <questions@freebsd.org>; Sun,  2 Apr 2006 16:33:14 +0000 (UTC)
	(envelope-from niklaus@gmail.com)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.228])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5363543D48
	for <questions@freebsd.org>; Sun,  2 Apr 2006 16:33:14 +0000 (GMT)
	(envelope-from niklaus@gmail.com)
Received: by wproxy.gmail.com with SMTP id 36so1115143wra
	for <questions@freebsd.org>; Sun, 02 Apr 2006 09:33:13 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=EWCdLAySDEXizaN5Qy6V3fs7mJ5lWHvdV45TShmZYnnuEIAuar8YlsVCyhy+Yu+mdSJfPn20XwZJN05bMlS9jsxF7lGGm4saw2/p6xueJ9NJGKAcnD45qoLZAXSFvWnJkm03xJsG/I7p1AW3qj1dZqUIKu2mmmzQnNvdf7DMrYw=
Received: by 10.64.210.2 with SMTP id i2mr311496qbg;
	Sun, 02 Apr 2006 09:33:13 -0700 (PDT)
Received: by 10.64.131.15 with HTTP; Sun, 2 Apr 2006 09:33:13 -0700 (PDT)
Message-ID: <85e0e3140604020933h7b334424n422cfa63a8986d12@mail.gmail.com>
Date: Sun, 2 Apr 2006 22:03:13 +0530
From: Niklaus <niklaus@gmail.com>
To: fbsd_user@a1poweruser.com
In-Reply-To: <MIEPLLIBMLEEABPDBIEGGEOLHDAA.fbsd_user@a1poweruser.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <85e0e3140604020746t19565d1doc61493b89ec87905@mail.gmail.com>
	<MIEPLLIBMLEEABPDBIEGGEOLHDAA.fbsd_user@a1poweruser.com>
Cc: questions@freebsd.org
Subject: Re: disable listen on ports
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 02 Apr 2006 16:33:15 -0000

On 4/2/06, fbsd_user <fbsd_user@a1poweruser.com> wrote:
> You need to activate one of the 3 different built in FreeBSD
> firewalls.
> It well explained in the firewall section of the FreeBSD handbook.
>
> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org
> [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Niklaus
> Sent: Sunday, April 02, 2006 10:47 AM
> To: questions@freebsd.org
> Subject: disable listen on ports
>
>
> Hi,
>  How do i disable users on a system to run their own http proxy. I
> don't want to allow users who have login accounts on my system to
> listen to any port . How do i do that.
>

The  downside of it is that i have add all the protocols like ssh in
the white list.
Is there a way only for root user to listen on a port.

> Regards
> Nik
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe@freebsd.org"
>
>