out going ip control

[deltis]

hi all
i am having a network of 10 Red Hat 7.2 machines. can somebody tell me how to disable a particular ip/port so that nobody sitting on my network can connect to that ip ...

delta

 

[fluid11]

You can block it with a firewall, or there are other ways but you have to tell us what port and service it is first. One way is with the /etc/hosts.deny file.


ChrisP ------------------------------------------------------------------------------
If somebody helps you, please vote for them for "Tipmaster of the Week" by giving them a "purple star". This can be done by clicking the "Mark this post as a helpful/expert post" button.

 

[deltis]

i want to block yahoo messenger that people use through a program called gaim. yahoo messenger runs on port 5050 . i used iptables to block the port but people have started using export DISPLAY to use gaim from other comp which is not in my control as well as has permissions to run gaim.

 

[fluid11]

lol, thats sneaky. I'm surprised your users are technical enough to do that. If I remove the Office shortcuts from the desktop on my users, they think the program is gone Out of curiosity, what do these users do for a living?


ChrisP

 

[marsd]

So they are setting up X connects through another machine?
Block and log X connects to that host.

iptables -N XCHAIN
iptables -A XCHAIN -s 0/0 -j LOG --log-prefix "Denied X_$Xrelayhost"
iptables -A XCHAIN -s 0/0 -j REJECT
iptables -A XCHAIN -s 0/0 -j RETURN

iptables -A OUTPUT -d $Xrelayhost -p tcp --dport 6000:6010 -j XCHAIN