Date: Tue, 21 Aug 2001 18:22:29 -0700 From: "Crist J. Clark" <cristjc@earthlink.net> To: "c.s. (maneo) peron" <maneo@icmp.dhs.org> Cc: freebsd-security@FreeBSD.ORG Subject: Re: inet socket restriction via group (fwd) Message-ID: <20010821182229.D313@blossom.cjclark.org> In-Reply-To: <20010821184631.H13462-100000@icmp.dhs.org>; from maneo@icmp.dhs.org on Tue, Aug 21, 2001 at 06:47:09PM -0500 References: <20010821184631.H13462-100000@icmp.dhs.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Aug 21, 2001 at 06:47:09PM -0500, c.s. (maneo) peron wrote:
>
> True you could use ipfw, however i dont believe you can filter
> a group when using ipf. (correct me if iam wrong)
You are wrong. ipfw(8) says,
uid user
Match all TCP or UDP packets sent by or received for a
user. A user may be matched by name or identification
number.
gid group
Match all TCP or UDP packets sent by or received for a
group. A group may be matched by name or identification
number.
--
Crist J. Clark cjclark@alum.mit.edu
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010821182229.D313>