Hi Grant, Isn't this classic option suitable?
groupadd noinet usermod -a -G noinet <your_user> iptables -A OUTPUT -i <some_interface> -m owner --gid-owner noinet -j DROP and calling not Plex but sg noinet Plex (or whatever name the binary has) -- Best regards, Alex