Re: Protection against Trojans?

faq
flatforty
contribute
subscribe
configure
search
rdf

main
parent
thread

Re: Protection against Trojans?
by fler on Friday 03/May/2002, @00:56

btw you can block specified apps /pids / users from accessing the network with iptables's owner match support

For ex to prevent mozilla from going anywhere
iptables -A OUTPUT -m owner --cmd-owner mozilla -j DROP

you could of course do it the other way around and block all outgoing traffic by default and allow only specified apps to access the network

Related Links

·   Articles on Applications
·   Also by fler
·   Contact author

The Fine Print: The following comments are owned by whomever posted them.
( Reply )

Re: Protection against Trojans?
by Ian Monroe on Friday 03/May/2002, @08:13

So a good idea would be to have a program which blocks all outgoing traffic by default, and then prompts you to let programs access the internet or open up a port, like ZoneAlarm. It would be complicated, because it really should prompt in an anogistic fashion, whether your in KDE, gnome, console whatever. Though having a program which prompts you say, only in KDE, and requires editing a text file otherwise would still be handy.

Though is the only way it differenates programs is by their name? Couldn't someone write a trojan named Mozilla and then bypass the rules?

[ Reply To This | View ]

Re: Protection against Trojans?
by theorz on Friday 03/May/2002, @09:19

Yes a zonealarm type system would be nice. Guarddog is a great piece of software, but it is made to work with, ipchains and iptables. This prevents them from getting the most out of iptables. It would be nice if ipchains support is dropped in the future. Though I do not have any spyware problems with linux now, so guarddog is more than adequate for now.

[ Reply To This | View ]

The Fine Print: The previous comments are owned by whomever posted them.
( Reply )


		"We've been wondering, are Andreas Pour and Navindra Umanee the same person?" -- Charles Samuels
KDE®, "K Desktop Environment", "KDE Dot News", "got the dot?" and the KDE Logo® are trademarks or registered trademarks of KDE e.V. in the European Union, the United States and other countries. All other trademarks and copyrights on this page are owned by their respective owners. Comments are owned by the poster. The rest: Copyright © 2000-2008 KDE e.V. for The KDE Project. For further information or comments on this site, please contact the Webmaster.