From owner-freebsd-questions@FreeBSD.ORG Thu Feb 9 11:51:32 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 16F9A16A420 for ; Thu, 9 Feb 2006 11:51:32 +0000 (GMT) (envelope-from fbsd_user@a1poweruser.com) Received: from mta9.adelphia.net (mta9.adelphia.net [68.168.78.199]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7B3AB43D46 for ; Thu, 9 Feb 2006 11:51:31 +0000 (GMT) (envelope-from fbsd_user@a1poweruser.com) Received: from barbish ([69.172.31.117]) by mta9.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with SMTP id <20060209115130.RBMT22902.mta9.adelphia.net@barbish>; Thu, 9 Feb 2006 06:51:30 -0500 From: "fbsd_user" To: "andrew clarke" , Date: Thu, 9 Feb 2006 06:51:29 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <20060209084833.GA26877@ozzmosis.com> Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 Cc: Subject: RE: fine grained firewall? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: fbsd_user@a1poweruser.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2006 11:51:32 -0000 I believe IPFW has uid option on rules as in 070 deny tcp from me to any out via $pif setup keep-state uid bob -----Original Message----- From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of andrew clarke Sent: Thursday, February 09, 2006 3:49 AM To: freebsd-questions@freebsd.org Subject: fine grained firewall? Is it possible to configure the FreeBSD firewall to block ports on a per-user or per-executable basis? eg. - Block /usr/local/bin/irc from connecting to TCP port 6667 - Block user 'johnsmith' from connecting to TCP port 21 etc. Thanks. Regards Andrew _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"