Update README.md
This commit is contained in:
@@ -57,16 +57,16 @@ Breakdown of iptables command:
|
|||||||
|
|
||||||
*the --gid-owner "no-internet" flag specifies for the rule to match processes created by the group 'no-internet'
|
*the --gid-owner "no-internet" flag specifies for the rule to match processes created by the group 'no-internet'
|
||||||
|
|
||||||
*the -j DROP flag specifies the action to take, in this case dropping the packetnn
|
*the -j DROP flag specifies the action to take, in this case dropping the packets
|
||||||
|
|
||||||
Next we will reload our services, then enable no-internet so it persistently starts at boot
|
Next we will reload our systemctl services, and enable no-internet so it persistently starts at boot
|
||||||
```
|
```
|
||||||
systemctl daemon-reload
|
systemctl daemon-reload
|
||||||
systemctl enable no-internet.service
|
systemctl enable no-internet.service
|
||||||
systemctl start no-internet.service
|
systemctl start no-internet.service
|
||||||
```
|
```
|
||||||
|
|
||||||
Note: a similar effect could be achived via crontab by making an entry along the lines of
|
Note: a similar effect could be achived via cron by making an entry along the lines of
|
||||||
```
|
```
|
||||||
@reboot root iptables -I OUTPUT 1 -m owner --gid-owner "no-internet" -j DROP
|
@reboot root iptables -I OUTPUT 1 -m owner --gid-owner "no-internet" -j DROP
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user