Why not use -m owner on the iptables of the freenx host to mark the packages?<br><br>like iptables -A OUTPUT -m owner --uid-owner <uid-of-a-user> -j MARK --set-mark 0xblahnumber ?<br><br><div><span class="gmail_quote">
2007/2/8, mir <<a href="mailto:mir@ogrody.gda.pl">mir@ogrody.gda.pl</a>>:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi to all
<br>Till now, My Linux box was a gateway to internet for small net ~20<br>hosts. I want to change it, I've started Freenx server on Debian Etch<br>and I plan to cut direct connection from local hosts to internet<br>(security reason). On gateway Linux box I implemented net-acct to log
<br>all traffic from local host to internet hosts.<br><br>My problem to start Freenx server for my network users and cut direct<br>connection is: How to identify outgoing connection per user, similar way<br>net-acct do.<br>
<br>First Idea was to patch Linux kernel on box running Freenx server.<br>Patched kernel should assign for outgoing connections tcp/udp ports<br>depending on user (owner of this connection). This way I could simply<br>recognize who made any logged connection. There is also patch for
2.4<br>kernel <a href="http://www.ex-parrot.com/~pdw/user-port-hack/">http://www.ex-parrot.com/~pdw/user-port-hack/</a><br>But for kernel 2.6, I found nothing. Maybe someone could adopt this<br>patch for kernel 2.6<br>Maybe someone has different idea, how to log user traffic from host
<br>running Freenx server ?<br><br>To change all computers in local network to be only terminals for freenx<br>server I think user connection logging problem should be solved.<br><br>Mirek<br><br><br><br>________________________________________________________________
<br> Were you helped on this list with your FreeNX problem?<br> Then please write up the solution in the FreeNX Wiki/FAQ:<br> <a href="http://openfacts.berlios.de/index-en.phtml?title=FreeNX_FAQ">http://openfacts.berlios.de/index-en.phtml?title=FreeNX_FAQ
</a><br> Don't forget to check the NX Knowledge Base:<br> <a href="http://www.nomachine.com/kb/">http://www.nomachine.com/kb/</a><br><br>________________________________________________________________
<br> FreeNX-kNX mailing list --- <a href="mailto:FreeNX-kNX@kde.org">FreeNX-kNX@kde.org</a><br> <a href="https://mail.kde.org/mailman/listinfo/freenx-knx">https://mail.kde.org/mailman/listinfo/freenx-knx</a><br>
________________________________________________________________<br></blockquote></div><br>