Hello
My system is openSUSE 11.0
I want to forbid access to internet for conqueror and firefox and leave it for opera.
I devised only to setup firewall. It must detect programm and if it is conqueror then block any net activity, but only for the conqueror.
Unfortunately, i didn’t find anything that can help me in firewall setup tabs.
So, i don’t know what to do.
Could you give me an advise please?
The only ways Konqueror or Firefox are going to start without you choosing them is if they are part of a script or you click a link in Konqueror when using it as a file manager.
I have never come across a script which does this on my installation; if you do, edit it to use Opera or disable it. You can avoid Konqueror becoming a web browser if you avoid clicking on links when using it as a file manager.
No. I do want use firefox and Konqueror as browser, but like they are in offline mode always.
For example, i have a single web-page on the disc with no other resources like images, sounds etc. This page contains links to missed resources and browser starts to download it from internet. I want to use firefox and Konqueror only in offline mode, and opera - in online mode. Ofcourse, i may simply disconnect connection with network, but, as you can expect, it’s not convenient. More over, simetimes i noway forget break connection, and my browser will go to internet.
That’s it. How can i separate behaviour of these browsers?
For firefox, you can click on File -> ‘Work Offline’. That way you can keep your network connaection active, and browse offline with firefox.
ok, i can disconnect firefox, but what about Konqueror? And in general, there must be a way to do a disconnect for any programm you like. Ex. i experienced games which after starting goes to internet and look for update. I don’t want it. I only want allow internet for opera, thunderbird and pidgin. I belive there is solution, but where?
Interesting question. I believe iptables can be configured to allow/deny particular apps. Read this thread. You might need to google for help with iptables.
There are bound to be application filtering firewalls available as well.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
You can also do it per user with outbound connections so you could
prevent a connection, outbound, for a user, ‘itten’, to any port, or to
port 80 or 443 to block most things. Keep in mind blocking by
application is probably better up until somebody just changes the name
of the application. A two-pronged approach will be more complete.
Good luck.
deano ferrari wrote:
| Interesting question. I believe iptables can be configured to allow/deny
| particular apps. Read this ‘thread’ (http://tinyurl.com/67xz6d). You
| might need to google for help with iptables.
|
| There are bound to be application filtering firewalls available as
| well.
|
|
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFIfmF53s42bA80+9kRAmEPAJ4vwUmw4+5tcy0vXnluFXthP2/SJgCfTuwv
Z+1VMRM+t7Pvjo9q8EkYN2g=
=QnWP
-----END PGP SIGNATURE-----
Thanks for the link, it was very useful. As i understood, there is no any decent firewall, which can controll application on my computer except iptables.
The conclusion is to learn how to deal with this monster.
It is a pity, that linux doesn’t have such useful programm with simple graphical interface. In windows there are a lot of such stuff
itten wrote:
>
> deano_ferrari;1840471 Wrote:
>> I believe iptables can be configured to allow/deny particular apps. Read
>> this ‘thread’ (http://tinyurl.com/67xz6d).
>
> Thanks for the link, it was very useful. As i understood, there is no
> any decent firewall, which can controll application on my computer
> except iptables.
> The conclusion is to learn how to deal with this monster.
> It is a pity, that linux doesn’t have such useful programm with simple
> graphical interface. In windows there are a lot of such stuff
>
>
AppArmor can selectively remove internet / network access to any program.
–
L R Nix
lornix@lornix.com
itten wrote:
>
> Hello
> My system is openSUSE 11.0
> I want to forbid access to internet for conqueror and firefox and leave
> it for opera.
> I devised only to setup firewall. It must detect programm and if it is
> conqueror then block any net activity, but only for the conqueror.
> Unfortunately, i didn’t find anything that can help me in firewall
> setup tabs.
> So, i don’t know what to do.
> Could you give me an advise please?
>
>
You can choose which browser you want by going to:
Personal Settings/KDE Components/Component Chooser/Web Browser. Click on the
dropdown link and select Opera.
This won’t forbid Konqueror and Firefox from accessing the internet, but
Opera will become the default browser, in case this is good enough for your
purposes. After this, if you click on a url it should use Opera.
–
bob@rsmits.ca (Robert Smits, Ladysmith BC)
“I’m not one of those who think Bill Gates is the devil. I simply suspect
that if Microsoft ever met up with the devil, it wouldn’t need an
interpreter.” - Nicholas Petreley