diff --git a/README.md b/README.md index 00d54b6..b3bed36 100644 --- a/README.md +++ b/README.md @@ -57,16 +57,16 @@ Breakdown of iptables command: *the --gid-owner "no-internet" flag specifies for the rule to match processes created by the group 'no-internet' -*the -j DROP flag specifies the action to take, in this case dropping the packetnn +*the -j DROP flag specifies the action to take, in this case dropping the packets -Next we will reload our services, then enable no-internet so it persistently starts at boot +Next we will reload our systemctl services, and enable no-internet so it persistently starts at boot ``` systemctl daemon-reload systemctl enable no-internet.service systemctl start no-internet.service ``` -Note: a similar effect could be achived via crontab by making an entry along the lines of +Note: a similar effect could be achived via cron by making an entry along the lines of ``` @reboot root iptables -I OUTPUT 1 -m owner --gid-owner "no-internet" -j DROP ```