iptables - allow yum update port 80 but deny browsing

joshroden · Post by **joshroden** » 2016/03/14 16:00:06

Anyone know how to allow yum updates but to deny all other browsing on ports 80 and 443?
Thanks

gerald_clark · Post by **gerald_clark** » 2016/03/14 16:50:59

Don't install a browser.

Post by **TrevorH** » 2016/03/14 16:56:24

Since yum has to run as root you can use the -m owner --uid-owner 0 iptables parameters to only allow outbound connection on ports 80/443.

joshroden · Post by **joshroden** » 2016/03/17 11:32:22

Hi TrevorH
Your suggestion worked great!
Thx

joshroden · Post by **joshroden** » 2016/03/24 08:38:58

Hi,
Is there an iptables way to allow access only to gmail.com, eventhough, there's a lot of
ip addresses belonging to gmail.com and often changing as well?
I would like to get a referal to a free course on iptables?
thx

giulix63 · Post by **giulix63** » 2016/03/24 08:49:44

Use a filtering proxy, e.g. Squid.

CentOS

iptables - allow yum update port 80 but deny browsing

iptables - allow yum update port 80 but deny browsing

Re: iptables - allow yum update port 80 but deny browsing

Re: iptables - allow yum update port 80 but deny browsing

Re: iptables - allow yum update port 80 but deny browsing

Re: iptables - allow yum update port 80 but deny browsing

Re: iptables - allow yum update port 80 but deny browsing