How to block Internet for guest account?

Question

How can I block or disable my Ethernet Internet connection, for the guest account only?

Maybe `iptables` with the `owner` match module is an option for you. Never tried it myself though. Here is an example about its use: http://linuxpoison.blogspot.nl/2010/11/how-to-limit-network-access-by-user.html — jippie, Jun 02 '12 at 17:30

score 3 · Answer 1 · answered Jun 02 '12 at 17:38

First you need to edit the network interfaces file.

Just press Ctrl+Alt+T on your keyboard to open Terminal. When it opens, run the command below.

sudo gedit /etc/network/interfaces

Now you need to add the simple iptables rule to the interfaces file when the internet connection starts up

Simply add this in the interfaces file

pre-up iptables -A OUTPUT -p tcp -m owner --uid-owner username -j DROP

save and exit the file.

Now you need to type in the terminal with the following command

sudo iptables -A OUTPUT -p tcp -m owner --uid-owner username -j DROP

and switch users to the username you blocked and try to access the internet.

The problem with this is that the actual username associated with a guest session starts with `guest-` and then contains random characters; it's different for each guest session, as the user is dynamically created on login. — Eliah Kagan, Jun 03 '12 at 17:29

score 0 · Answer 2 · edited Jun 02 '12 at 17:40

0

You can use the following command to block particular user:

sudo iptables -A OUTPUT -p tcp -m owner --uid-owner username -j DROP

edited Jun 02 '12 at 17:40

Alvar

answered Jun 02 '12 at 17:34

Shekhar Raut

The problem with this is that the actual username associated with a guest session starts with `guest-` and then contains random characters; it's different for each guest session, as the user is dynamically created on login. – Eliah Kagan Jun 03 '12 at 17:29

2 Answers2