FreeBSD Access Control and Security

[Jorge]

Hi. I let friends of myne ssh onto my FreeBSD machine on my network and I was wondering how I could limit their access to the internet or maybe not even
let them have any access to the internet? Also I was wondering what a good site or paper is on FreeBSD security? Any help is welcome and very appreciated! >:)

[twistah]

That's a _really_ interesting question. I can't think of how to properly do something like that on a user-by-user basis, but you might want to ask in #freebsdhelp @ EfNet.

The only example I can think of is CyberSpace.Org (GREX). They don't allow non-paid users any kind of outbound sockets. But they run SunOS 4.1.4 (which is like, circa 1990 or earlier) and they did it with custom kernel modifications (or at least that's what one admin told me.)

You may not have to go that far, however. I am not familiar w/ ipf (still use Linux on router..heh) and it might allow for some kind of rule based on user. Not really sure, though.

Sorry I didn't have any real answer. I'll try and think of something.

http://www.linuxnewbie.org/ubb/biggrin.gif twistah http://www.linuxnewbie.org/ubb/biggrin.gif

[Inferno]

Check out http://www.bsdvault.net

[ndelo]

try posting the same question on http://potomacanglers.com/cgibin/Ultimate.cgi?action=intro