4 ms·
> iptables --pid-owner[1] Thats broken (only matches the exact PID, no child processes and according to the documentation does not work on SMP systems). It als
by catdog 10y ago
> iptables --pid-owner[1]
Thats broken (only matches the exact PID, no child processes and according to the documentation does not work on SMP systems). It also got removed at some point. There is a cgroup match which may be usable instead, also network namespaces may be a good solution in some cases.
- 45h34jh53k4j 10y agotrue. but the cgroup match and namespaces require apriori configuration. I want something that will warn me when a new process is trying to dial out.