Re: disable listen on ports

2006-04-04 Thread Igor Grabin
On Sun, Apr 02, 2006 at 10:14:11PM +0530, Niklaus wrote: > How do i disable users on a system to run their own http proxy. I > don't want to allow users who have login accounts on my system to > listen to any port . How do i do that. man pf.conf search for the word 'user', you need the third match

Re: disable listen on ports

2006-04-03 Thread Arnaud Bergeron
On 4/3/06, Joachim Schipper <[EMAIL PROTECTED]> wrote: > On Mon, Apr 03, 2006 at 11:11:22AM +0530, Niklaus wrote: > > On 4/2/06, Chris Kuethe <[EMAIL PROTECTED]> wrote: > > > On 4/2/06, Niklaus <[EMAIL PROTECTED]> wrote: > > > > > what problem are you really trying to solve? > > > > > > really, wha

Re: disable listen on ports

2006-04-03 Thread Joachim Schipper
On Mon, Apr 03, 2006 at 11:11:22AM +0530, Niklaus wrote: > On 4/2/06, Chris Kuethe <[EMAIL PROTECTED]> wrote: > > On 4/2/06, Niklaus <[EMAIL PROTECTED]> wrote: > > > > what problem are you really trying to solve? > > > > really, what problem are you trying to solve? the fact that you have > > untru

Re: disable listen on ports

2006-04-02 Thread Niklaus
On 4/2/06, Chris Kuethe <[EMAIL PROTECTED]> wrote: > On 4/2/06, Niklaus <[EMAIL PROTECTED]> wrote: > > > what problem are you really trying to solve? > > really, what problem are you trying to solve? the fact that you have > untrusted users? > > > I understand the tunnelling through ssh part. > > C

Re: disable listen on ports

2006-04-02 Thread Chris Kuethe
On 4/2/06, Niklaus <[EMAIL PROTECTED]> wrote: > > what problem are you really trying to solve? really, what problem are you trying to solve? the fact that you have untrusted users? > I understand the tunnelling through ssh part. > Can you explain what reverse telnet is . I don't get it. assume h

Re: disable listen on ports

2006-04-02 Thread Niklaus
On 4/2/06, Chris Kuethe <[EMAIL PROTECTED]> wrote: > On 4/2/06, Stuart Henderson <[EMAIL PROTECTED]> wrote: > > On 2006/04/02 22:54, Niklaus wrote: > > > > pf will probably do what you want, they'll be able to run the proxy, but > > > > won't be able to initiate an inbound connection. > > > > > > >

Re: disable listen on ports

2006-04-02 Thread Chris Kuethe
On 4/2/06, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2006/04/02 22:54, Niklaus wrote: > > > pf will probably do what you want, they'll be able to run the proxy, but > > > won't be able to initiate an inbound connection. > > > > > The problem with pf is that you have to setup filter or white

Re: disable listen on ports

2006-04-02 Thread Matthias Kilian
On Sun, Apr 02, 2006 at 10:54:24PM +0530, Niklaus wrote: > The problem with pf is that you have to setup filter or white list for > every new protcol that i setup from root. No, just filter on user or group id. Ciao, Kili -- It's a Barrier Of Entry issue: if you can't figure out which

Re: disable listen on ports

2006-04-02 Thread Stuart Henderson
On 2006/04/02 22:54, Niklaus wrote: > > pf will probably do what you want, they'll be able to run the proxy, but > > won't be able to initiate an inbound connection. > > > The problem with pf is that you have to setup filter or white list for > every new protcol that i setup from root. > > I only

Re: disable listen on ports

2006-04-02 Thread Niklaus
On 4/2/06, Steve Shockley <[EMAIL PROTECTED]> wrote: > Niklaus wrote: > > How do i disable users on a system to run their own http proxy. I > > don't want to allow users who have login accounts on my system to > > listen to any port . How do i do that. > > Don't cross-post. > > pf will probably do

Re: disable listen on ports

2006-04-02 Thread Steve Shockley
Niklaus wrote: How do i disable users on a system to run their own http proxy. I don't want to allow users who have login accounts on my system to listen to any port . How do i do that. Don't cross-post. pf will probably do what you want, they'll be able to run the proxy, but won't be able t