linux 停用用户,linux – 如何禁用用户的网络访问?

尝试禁用用户的网络访问:

[root@notebook ~]# iptables -I OUTPUT -m owner --uid-owner tempuser -j DROP

[root@notebook ~]# ip6tables -I OUTPUT -m owner --uid-owner tempuser -j DROP

Could not open socket to kernel: Address family not supported by protocol

[root@notebook ~]#

[root@notebook ~]# iptables -I INPUT -m owner --uid-owner tempuser -j DROP

iptables: Invalid argument. Run `dmesg' for more information.

[root@notebook ~]# ip6tables -I INPUT -m owner --uid-owner tempuser -j DROP

Could not open socket to kernel: Address family not supported by protocol

[root@notebook ~]#

测试它:

[root@notebook ~]# su - tempuser

[tempuser@notebook ~]$ping google.com

ping: unknown host google.com

[tempuser@notebook ~]$

[tempuser@notebook ~]$ping 8.8.8.8

PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.

64 bytes from 8.8.8.8: icmp_seq=1 ttl=56 time=4.80 ms

64 bytes from 8.8.8.8: icmp_seq=2 ttl=56 time=4.07 ms

^C

--- 8.8.8.8 ping statistics ---

2 packets transmitted, 2 received, 0% packet loss, time 1057ms

rtt min/avg/max/mdev = 4.071/4.439/4.807/0.368 ms

[tempuser@notebook ~]$

[tempuser@notebook ~]$exit

logout

[root@notebook ~]# ping google.com

PING google.com (216.58.209.174) 56(84) bytes of data.

64 bytes from bud02s21-in-f14.1e100.net (216.58.209.174): icmp_seq=1 ttl=55 time=5.05 ms

^C

--- google.com ping statistics ---

1 packets transmitted, 1 received, 0% packet loss, time 572ms

rtt min/avg/max/mdev = 5.059/5.059/5.059/0.000 ms

[root@notebook ~]#

问题:如何在Linux下禁用给定用户的网络访问? (INPUT / OUTPUT / IPv4 / IPv6?) – 为什么我仍然可以与用户ping IPv4地址?

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值