hi, 2009/10/21 Pascal Hambourg <[email protected]>
> [Sent back on the list. Please pay attention to the recipient address.] > > Cory Oldford a écrit : > > Is the traffic originating from a process on the machine with the > firewall? > > Of course. The OUTPUT chain sees only packets generated by local > processes. This is why the "owner" match is valid only in this chain. > > mh ok. Well, the packet IN-if is ppp0 and the OUT-if is eth2. The user is a winbind mapped user-id. Last and ac can both map the user-id with the username, so my hope was iptables could this do, too. So routing-packets have no localuser-owner? Greetings,Björn -- To boldly go where no man has gone before ... I'll wait there with touristinformation

