From owner-freebsd-questions@FreeBSD.ORG  Thu Feb  9 08:48:57 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DB64B16A420
	for <freebsd-questions@freebsd.org>;
	Thu,  9 Feb 2006 08:48:57 +0000 (GMT)
	(envelope-from mail@ozzmosis.com)
Received: from smtp2.syd.swiftdsl.com.au (smtp2.syd.swiftdsl.com.au
	[218.214.225.98])
	by mx1.FreeBSD.org (Postfix) with SMTP id 93C0A43D6D
	for <freebsd-questions@freebsd.org>;
	Thu,  9 Feb 2006 08:48:52 +0000 (GMT)
	(envelope-from mail@ozzmosis.com)
Received: (qmail 21472 invoked from network); 9 Feb 2006 08:49:04 -0000
Received: from unknown (HELO blizzard.dancer) (218.214.144.129)
	by smtp2.syd.swiftdsl.com.au with SMTP; 9 Feb 2006 08:49:04 -0000
Received: from blizzard.dancer (ozzmosis@localhost [127.0.0.1])
	by blizzard.dancer (8.12.11/8.12.11) with ESMTP id k198mYrr026893
	for <freebsd-questions@freebsd.org>;
	Thu, 9 Feb 2006 19:48:34 +1100 (EST)
	(envelope-from mail@ozzmosis.com)
Received: (from ozzmosis@localhost)
	by blizzard.dancer (8.12.11/8.12.11/Submit) id k198mX50026892
	for freebsd-questions@freebsd.org; Thu, 9 Feb 2006 19:48:33 +1100 (EST)
	(envelope-from mail@ozzmosis.com)
X-Authentication-Warning: blizzard.dancer: ozzmosis set sender to
	mail@ozzmosis.com using -f
Date: Thu, 9 Feb 2006 19:48:33 +1100
From: andrew clarke <mail@ozzmosis.com>
To: freebsd-questions@freebsd.org
Message-ID: <20060209084833.GA26877@ozzmosis.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.11
Subject: fine grained firewall?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Feb 2006 08:48:58 -0000

Is it possible to configure the FreeBSD firewall to block ports on a
per-user or per-executable basis?

eg.

- Block /usr/local/bin/irc from connecting to TCP port 6667

- Block user 'johnsmith' from connecting to TCP port 21

etc.

Thanks.

Regards
Andrew