On Thu, 2005-04-14 at 18:38, Dean Michael C. Berris wrote: > This will affect only locally originating packets right? How about > filtering packets that are owned by a "command" on another machine? > Would this work?
>From "man iptables": owner This module attempts to match various characteristics of the packet creator, for locally-generated packets. It is only valid in the OUTPUT chain, and even this some packets (such as ICMP ping responses) may have no owner, and hence never match. So I guess it's locally originating packets only. -- Gideon N. Guillen [EMAIL PROTECTED] Take back the web! Download Firefox Today! http://getfirefox.com -- Philippine Linux Users' Group (PLUG) Mailing List plug@lists.q-linux.com (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie