Deny access from localhost to internet.....

[Chuck Swiger]

On Sep 28, 2007, at 10:51 AM, Agus wrote:
> The question is this..I want to restrict external access, that is  
> from my
> BSD to the internet, to some groups of users. Other groups i want  
> to access
> internet normally. I dont want this group of users to be able to  
> establish
> connections to the internet but yes to the internal systems on the  
> LAN...
>
> Is this possible without hacking the kernel?

Sure.  Install a proxy mechanism like SOCKS or Squid (if you just  
want to control web traffic) which requires users to authenticate  
before they are allowed to connect to the net...

-- 
-Chuck