Group: comp.os.linux.networking


Subject: User login into a vserver (was: How to limit internet access "by account")
From: Ignoramus27577
Date: 10/17/2007 3:05:45 PM
On 2007-10-17, Stefan Monnier <monnier@iro.umontreal.ca> wrote: >> Is there some way, on a linux box, to restrict internet access of one >> user, to only certain ports and certain websites? Any thoughts? This >> is a kid issue. I am not afraid of viruses, but more of objectionable >> content. Even that does not bother me too much, but i WANT TO start >> with having control. > > Indeed a very interesting question: I'll be needing an answer soon as well. The answer is iptables, search the manual for "owner". I have not tried it yet, but it looks like "it". i > I was wondering if maybe I could let the kid login into a virtual machine > (like a vserver), just like restricted accounts used to do, but instead of > having a chroot jail, you get a vserver (the modern day equivalent of > a chroot jail). > > Then you can let the host manage the internet connection of the guest in any > way you want. Also you can give root access to your kid so he can play > around all she wants without risking bringing down the entire system. > > Has someone does that already and has tips to give? > > > Stefan