Firewalld: Difference between revisions
From Ju's wiki
More actions
No edit summary |
No edit summary |
||
| Line 7: | Line 7: | ||
<rule ipv="ipv6" table="filter" chain="OUTPUT" priority="0">-m owner --gid-owner 1234 -o lo -j ACCEPT</rule> | <rule ipv="ipv6" table="filter" chain="OUTPUT" priority="0">-m owner --gid-owner 1234 -o lo -j ACCEPT</rule> | ||
<rule ipv="ipv6" table="filter" chain="OUTPUT" priority="1">-m owner --gid-owner 1234 '!' -o tun0 -j REJECT</rule> | <rule ipv="ipv6" table="filter" chain="OUTPUT" priority="1">-m owner --gid-owner 1234 '!' -o tun0 -j REJECT</rule> | ||
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="0">-m owner --gid-owner no-network '!' -o lo -j REJECT</rule> | |||
<rule ipv="ipv6" table="filter" chain="OUTPUT" priority="0">-m owner --gid-owner no-network '!' -o lo -j REJECT</rule> | |||
</direct> | </direct> | ||
</source> | </source> | ||
[[Category:Free Software]] | [[Category:Free Software]] | ||
Latest revision as of 14:25, 20 October 2026
GID restrictions for e.g. VPN
<?xml version="1.0" encoding="utf-8"?>
<direct>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="0">-m owner --gid-owner 1234 -o lo -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="1">-m owner --gid-owner 1234 '!' -o tun0 -j REJECT</rule>
<rule ipv="ipv6" table="filter" chain="OUTPUT" priority="0">-m owner --gid-owner 1234 -o lo -j ACCEPT</rule>
<rule ipv="ipv6" table="filter" chain="OUTPUT" priority="1">-m owner --gid-owner 1234 '!' -o tun0 -j REJECT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="0">-m owner --gid-owner no-network '!' -o lo -j REJECT</rule>
<rule ipv="ipv6" table="filter" chain="OUTPUT" priority="0">-m owner --gid-owner no-network '!' -o lo -j REJECT</rule>
</direct>