|
|
Subject: User login into a vserver (was: How to limit internet access "by account")
From: Ignoramus27577
Date: 10/17/2007 3:05:45 PM
On 2007-10-17, Stefan Monnier <monnier@iro.umontreal.ca> wrote:
>> Is there some way, on a linux box, to restrict internet access of one
>> user, to only certain ports and certain websites? Any thoughts? This
>> is a kid issue. I am not afraid of viruses, but more of objectionable
>> content. Even that does not bother me too much, but i WANT TO start
>> with having control.
>
> Indeed a very interesting question: I'll be needing an answer soon as well.
The answer is iptables, search the manual for "owner".
I have not tried it yet, but it looks like "it".
i
> I was wondering if maybe I could let the kid login into a virtual machine
> (like a vserver), just like restricted accounts used to do, but instead of
> having a chroot jail, you get a vserver (the modern day equivalent of
> a chroot jail).
>
> Then you can let the host manage the internet connection of the guest in any
> way you want. Also you can give root access to your kid so he can play
> around all she wants without risking bringing down the entire system.
>
> Has someone does that already and has tips to give?
>
>
> Stefan
|