Re: blocking a site for others not for -m owner

[Alexander Samad <alex@samad.com.au>]

[-- Attachment #1: Type: text/plain, Size: 1081 bytes --]

On Thu, Jul 08, 2004 at 09:56:37AM +0500, Askar Ali Khan wrote:
> Salam
> 
> Im trying own my home box (standalone) which is directly connected
> with net via ppp0 (dialup). I got a three user accounts on this box
> only for practice purpose.
> Now im trying to block a site www.foo.com for users excluding user
> "askar" with something like....
> 
> #iptables -A OUTPUT -p tcp --dport 80 -d www.foo.com -j DROP
> 
>        this works for all users however when I tries to exclude user
> "askar" from this blocking with...
> 
> #iptables -A OUTPUT -p tcp --dport 80 -d www.kmmod.com -m owner
> --uid-owner askar -j ACCEPT

-A means to append to the end of the table, if you do it in the order
above it will not work

try -I for the second one

> 
>               site is still block for user "askar", i also tried with
> changing the other of the rules no working :), Howto exclude "askar" ?
> my default chain polices ...
> 
> Chain INPUT (policy ACCEPT)
> Chain FORWARD (policy ACCEPT)
> Chain OUTPUT (policy ACCEPT)
> 
> Regards
> Askar
> 
> 

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]