a firewall that filters by process name?

_Max_

Hi,

I was wondering whether there is a firewall application that filters according to process name? In particular, I was wondering whether there is something out there that allows you to temporarily open up e. g. an ftp port for your ftp client when you are downloading stuff. Preferably, the firewall application would prompt you and ask "would you like this program to connect to this IP number over this port" or something similar?

I saw that maybe you could set up something with iptables and the `owner' match extension, but I wouldn't trust myself to come up with something sensible, and am thinking that someone out there must have already done this. I don't want to reinvent the wheel...

cvk · Posted: Wed Sep 10, 2003 10:45 am Post subject:

I was searching for exactly the same thing this morning. FieryFilter might be able to do this, but it's "a pre-alpha version, it will probably format your harddisk. Consider it a 'preview version'." I haven't tried it after reading this warning, though :-)

Regards,
Chris
_________________
Adopt an unanswered post now.

sschlueter

indros · Tux's lil' helper Joined: 27 Sep 2002 Posts: 139

This may have be obvious to some, but this would only work from processes originating at the firewall, not clients behind (under the assumption it is NAT'ing).

_Max_ · Posted: Wed Sep 10, 2003 3:02 pm Post subject:

Thanks everyone. I think I am not brave enough to try FieryFilter right now as I can't afford to format my harddisk :wink:

systrace sounds promising, but isn't there something a little bit mature out there as well?

Indros: I was actually thinking of something like a "personal firewall", so in my case the processes that I want to give or deny access to would run on the same machine as the firewall.