Re: block a program from access the Internet.

2013-09-11 Thread Jeffrin Jose
On Mon, Sep 09, 2013 at 11:01:38AM -, atar wrote: Hi there!! Just wanted to know please if there's a way to block a specific program from accessing the Internet while preserving at the same time the ability of other programs to access the Internet, and if there's a way, so how? may be

Re: block a program from access the Internet.

2013-09-10 Thread Lars Noodén
On 10.09.2013 01:54, Pascal Hambourg wrote: Lars Noodén a écrit : Vincent's link suggests that --cmd-owner was removed from iptables entirely. Actually it was removed from the kernel part of iptables, not from the iptables userland. It would be important to find a more authoritative

block a program from access the Internet.

2013-09-09 Thread atar
Hi there!! Just wanted to know please if there's a way to block a specific program from accessing the Internet while preserving at the same time the ability of other programs to access the Internet, and if there's a way, so how? Thanks in advance!! atar. -- To UNSUBSCRIBE, email to

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:01, atar wrote: Hi there!! Just wanted to know please if there's a way to block a specific program from accessing the Internet while preserving at the same time the ability of other programs to access the Internet, and if there's a way, so how? Thanks in advance!!

Re: block a program from access the Internet.

2013-09-09 Thread Diogene Laerce
Just wanted to know please if there's a way to block a specific program from accessing the Internet while preserving at the same time the ability of other programs to access the Internet, and if there's a way, so how? iptables my friend.. If it's a known program, try gufw in the repositories

Re: block a program from access the Internet.

2013-09-09 Thread Claudius Hubig
Dear atar, atar wrote: Just wanted to know please if there's a way to block a specific program from accessing the Internet while preserving at the same time the ability of other programs to access the Internet, and if there's a way, so how? AppArmor and SELinux likely have such features,

Re: Re: block a program from access the Internet.

2013-09-09 Thread atar
Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option --cmd-owner Try `iptables -h' or 'iptables --help' for more information. Regards! atar. -- To UNSUBSCRIBE, email to

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 9/9/13 3:14 PM, atar wrote: Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option --cmd-owner Try `iptables -h' or 'iptables --help' for more information. Regards! atar. My

Re: block a program from access the Internet.

2013-09-09 Thread ken
On 09/09/2013 05:54 AM Lars Noodén wrote: On 9/9/13 3:14 PM, atar wrote: Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option --cmd-owner Try `iptables -h' or 'iptables --help' for

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:58, ken wrote: On 09/09/2013 05:54 AM Lars Noodén wrote: On 9/9/13 3:14 PM, atar wrote: Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option --cmd-owner Try

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:58, ken wrote: On 09/09/2013 05:54 AM Lars Noodén wrote: On 9/9/13 3:14 PM, atar wrote: Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option --cmd-owner Try

Re: block a program from access the Internet.

2013-09-09 Thread Vincent Lefevre
On 2013-09-09 15:50:10 +0300, Lars Noodén wrote: So somewhere between the 1.3.5 and 1.4.14, the capability disappeared Yes, according to http://unix.stackexchange.com/questions/32264/per-process-firewall --cmd-owner was removed because it didn't work properly. -- Vincent Lefèvre

Re: block a program from access the Internet.

2013-09-09 Thread atar
Lars wrote: One possible explanation might be SMP: $ uname -a Linux debian 3.2.0-4-686-pae #1 SMP Debian 3.2.41-2+deb7u2 i686 GNU/Linux Regards, /Lars Sorry, but what's your meaning by 'SMP'? Regards, atar. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 10.09.2013 00:36, atar wrote: Lars wrote: One possible explanation might be SMP: $ uname -a Linux debian 3.2.0-4-686-pae #1 SMP Debian 3.2.41-2+deb7u2 i686 GNU/Linux Regards, /Lars Sorry, but what's your meaning by 'SMP'? Regards, atar. Ken's message had this line:

Re: block a program from access the Internet.

2013-09-09 Thread Pascal Hambourg
Lars Noodén a écrit : Vincent's link suggests that --cmd-owner was removed from iptables entirely. Actually it was removed from the kernel part of iptables, not from the iptables userland. It would be important to find a more authoritative source on that like the netfilter list or the