{"id":337,"date":"2017-07-05T16:56:37","date_gmt":"2017-07-05T14:56:37","guid":{"rendered":"https:\/\/kszyh.kisim.eu.org\/?p=337"},"modified":"2017-07-05T16:58:17","modified_gmt":"2017-07-05T14:58:17","slug":"iptables-simple-network-sandbox","status":"publish","type":"post","link":"https:\/\/kszyh.kisim.eu.org\/?p=337","title":{"rendered":"iptables – simple network sandbox"},"content":{"rendered":"

Create user 'restricted’. That user can connect only to localhost (sometimes usefully), no other connection can be established from this account.<\/p>\n

iptables -A OUTPUT -d 127.0.0.1 -m owner --uid-owner restricted -j ACCEPT\r\niptables -A OUTPUT -p all -m owner --uid-owner restricted -j DROP<\/pre>\n
Alternatively it can be done for a specific group (in this case: security)<\/p>\n
iptables -A OUTPUT -p all -m owner --gid-owner security -j DROP<\/pre>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
Create user 'restricted’. That user can connect only to localhost (sometimes usefully), no other connection can be established from this account. iptables -A OUTPUT -d 127.0.0.1 -m owner –uid-owner restricted -j ACCEPT iptables -A OUTPUT -p all -m owner –uid-owner restricted -j DROP Alternatively it can be done for a…  Continue reading → <\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,23],"tags":[100,99,95],"class_list":["post-337","post","type-post","status-publish","format-standard","hentry","category-lifehacking","category-linux","tag-firewall","tag-iptables","tag-security"],"_links":{"self":[{"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=337"}],"version-history":[{"count":3,"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/337\/revisions"}],"predecessor-version":[{"id":340,"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/337\/revisions\/340"}],"wp:attachment":[{"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kszyh.kisim.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}