Gentoo Archives: gentoo-user

From: Grant Edwards <grant.b.edwards@×××××.com>
To: gentoo-user@l.g.o
Subject: [gentoo-user] Re: How to hide a network interface from an application
Date: Fri, 14 Aug 2020 22:06:12
Message-Id: rh71s9$di$1@ciao.gmane.io
In Reply to: [gentoo-user] Re: How to hide a network interface from an application by Grant Edwards
1 On 2020-08-14, Grant Edwards <grant.b.edwards@×××××.com> wrote:
2
3 > I think this should work, but I need to rebuild my kernel with the
4 > iptables "owner" extension enabled:
5 >
6 > iptables -A OUTPUT -o <interface> -m owner --uid-owner plex -j DROP
7
8 I can confirm, that did indeed work as desired.
9
10 Even with the kernel rebuild it was far less work than getting set up
11 to run a docker container (which also would have required a kernel
12 rebuild) or running the server in a separate network namespace.
13
14 --
15 Grant

Replies