How to block Internet for guest account?

Question

How can I block or disable my Ethernet Internet connection, for the guest account only?

Maybe iptables with the owner match module is an option for you. Never tried it myself though. Here is an example about its use: http://linuxpoison.blogspot.nl/2010/11/how-to-limit-network-access-by-user.html — jippie, Jun 02 '12 at 17:30

score 3 · Answer 1 · answered Jun 02 '12 at 17:38

First you need to edit the network interfaces file.

Just press Ctrl+Alt+T on your keyboard to open Terminal. When it opens, run the command below.

sudo gedit /etc/network/interfaces

Now you need to add the simple iptables rule to the interfaces file when the internet connection starts up

Simply add this in the interfaces file

pre-up iptables -A OUTPUT -p tcp -m owner --uid-owner username -j DROP

save and exit the file.

Now you need to type in the terminal with the following command

sudo iptables -A OUTPUT -p tcp -m owner --uid-owner username -j DROP

and switch users to the username you blocked and try to access the internet.

The problem with this is that the actual username associated with a guest session starts with guest- and then contains random characters; it's different for each guest session, as the user is dynamically created on login. — Eliah Kagan, Jun 03 '12 at 17:29

score 0 · Answer 2 · edited Jun 02 '12 at 17:40

0

You can use the following command to block particular user:

sudo iptables -A OUTPUT -p tcp -m owner --uid-owner username -j DROP

edited Jun 02 '12 at 17:40

Alvar

answered Jun 02 '12 at 17:34

Shekhar Raut

The problem with this is that the actual username associated with a guest session starts with guest- and then contains random characters; it's different for each guest session, as the user is dynamically created on login. – Eliah Kagan Jun 03 '12 at 17:29

2 Answers2