Re: disable listen on ports

2006-04-04 Thread Igor Grabin
On Sun, Apr 02, 2006 at 10:14:11PM +0530, Niklaus wrote: How do i disable users on a system to run their own http proxy. I don't want to allow users who have login accounts on my system to listen to any port . How do i do that. man pf.conf search for the word 'user', you need the third match.

Re: disable listen on ports

2006-04-03 Thread Joachim Schipper
On Mon, Apr 03, 2006 at 11:11:22AM +0530, Niklaus wrote: On 4/2/06, Chris Kuethe [EMAIL PROTECTED] wrote: On 4/2/06, Niklaus [EMAIL PROTECTED] wrote: what problem are you really trying to solve? really, what problem are you trying to solve? the fact that you have untrusted users?

Re: disable listen on ports

2006-04-03 Thread Arnaud Bergeron
On 4/3/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Mon, Apr 03, 2006 at 11:11:22AM +0530, Niklaus wrote: On 4/2/06, Chris Kuethe [EMAIL PROTECTED] wrote: On 4/2/06, Niklaus [EMAIL PROTECTED] wrote: what problem are you really trying to solve? really, what problem are you

disable listen on ports

2006-04-02 Thread Niklaus
Hi, How do i disable users on a system to run their own http proxy. I don't want to allow users who have login accounts on my system to listen to any port . How do i do that. Regards Nik

Re: disable listen on ports

2006-04-02 Thread Steve Shockley
Niklaus wrote: How do i disable users on a system to run their own http proxy. I don't want to allow users who have login accounts on my system to listen to any port . How do i do that. Don't cross-post. pf will probably do what you want, they'll be able to run the proxy, but won't be able

Re: disable listen on ports

2006-04-02 Thread Niklaus
On 4/2/06, Steve Shockley [EMAIL PROTECTED] wrote: Niklaus wrote: How do i disable users on a system to run their own http proxy. I don't want to allow users who have login accounts on my system to listen to any port . How do i do that. Don't cross-post. pf will probably do what you

Re: disable listen on ports

2006-04-02 Thread Stuart Henderson
On 2006/04/02 22:54, Niklaus wrote: pf will probably do what you want, they'll be able to run the proxy, but won't be able to initiate an inbound connection. The problem with pf is that you have to setup filter or white list for every new protcol that i setup from root. I only want root

Re: disable listen on ports

2006-04-02 Thread Matthias Kilian
On Sun, Apr 02, 2006 at 10:54:24PM +0530, Niklaus wrote: The problem with pf is that you have to setup filter or white list for every new protcol that i setup from root. No, just filter on user or group id. Ciao, Kili -- It's a Barrier Of Entry issue: if you can't figure out which

Re: disable listen on ports

2006-04-02 Thread Chris Kuethe
On 4/2/06, Stuart Henderson [EMAIL PROTECTED] wrote: On 2006/04/02 22:54, Niklaus wrote: pf will probably do what you want, they'll be able to run the proxy, but won't be able to initiate an inbound connection. The problem with pf is that you have to setup filter or white list for

Re: disable listen on ports

2006-04-02 Thread Niklaus
On 4/2/06, Chris Kuethe [EMAIL PROTECTED] wrote: On 4/2/06, Stuart Henderson [EMAIL PROTECTED] wrote: On 2006/04/02 22:54, Niklaus wrote: pf will probably do what you want, they'll be able to run the proxy, but won't be able to initiate an inbound connection. The problem with pf

Re: disable listen on ports

2006-04-02 Thread Chris Kuethe
On 4/2/06, Niklaus [EMAIL PROTECTED] wrote: what problem are you really trying to solve? really, what problem are you trying to solve? the fact that you have untrusted users? I understand the tunnelling through ssh part. Can you explain what reverse telnet is . I don't get it. assume have