Home / server / Questions / 263208
Accepted
corsiKa
Asked: 2011-04-26 10:23:00 +0800 CST

block program with iptables

  • 772

I have two programs both of which are in Java.

Program A was written by me. If it wants to establish an external connection, I'm okay with this.

Program B was not written by me. If it wants to establish an external connection, I'm not okay with this.

How can I configure iptables to allow java A to make outgoing connections, but java B to be denied?

If iptables can't be used for this, what other options do I have?

firewall

2 Answers

  1. Best Answer

    If you run the programs as different users you can use the owner module.

    iptables -A OUTPUT -m owner --uid-owner javaauser -j ACCEPT
iptables -A OUTPUT -m owner --uid-owner javabuser -j REJECT
    • 4

  2. You must block the port that the program you don't want external access uses. Suppose it uses port 30000:

     # iptables -A OUTPUT -s 0/0 -d 0/0 -p tcp --dport 30000 -j DROP

    This is a simple rule, you can learn more on this simple howto. Depending on what distribution you use, you can also try AppArmor, a kernel level application firewall.

    • 0