prevent FF from access web

[av1611]

I'll spare the details, but is there a way to use iptables to do the following:

Allow all port 80 traffic to work for squid, yum ,etc. but prevent firefox from talking to port 80?
(That way if they don't use squid proxy, it won't work)

Thanks.

[brunson]

Run a VM, then use iptables on the VM to only allow access to the proxy running in the host OS.

[av1611]

Originally Posted by brunson

Run a VM, then use iptables on the VM to only allow access to the proxy running in the host OS.

Points for ingenuity...
can you recommend which VM to use to keep the resource cost down?

[brunson]

Xen if you don't have virtualization support in your processor, kqemu if you do.

[stefan1975]

for linux in linux i'd say just use native fedora KVM virtualisation. otherwise virtualbox is not half bad, but with a linux guest in a linux host you get paravirtualisation, which give 99% of native performance.

stefan