RE: Want to block HTTP(web) access but not filesharing
RE: Want to block HTTP(web) access but not filesharing
- Subject: RE: Want to block HTTP(web) access but not filesharing
- From: Rahulkumar Tibdewal <email@hidden>
- Date: Wed, 27 May 2009 19:24:31 +0530
- Acceptlanguage: en-US, en-IN
- Thread-topic: Want to block HTTP(web) access but not filesharing
Hi,
I will write *.kext. I have to place that in /tmp folder and then load that particular *.kext
This can be done from terminal using sudo su.
But how to do this every time clients custom software launch?
Thanks
Rahul
-----Original Message-----
From: macnetworkprog-bounces+rahulkumar_tibdewal=email@hidden [mailto:macnetworkprog-bounces+rahulkumar_tibdewal=email@hidden] On Behalf Of Peter Sichel
Sent: Wednesday, May 27, 2009 6:34 PM
To: email@hidden Programming
Subject: Re: Want to block HTTP(web) access but not filesharing
On May 27, 2009, at 12:41 AM, Rahulkumar Tibdewal wrote:
> I want to share my current planning on the topic is as either use
> ipfw tables to add rule on http protocol
> or create a kernel extension.
>
> Can u guys please vote which is more feasible and better with
> appropriate reason?
Writing and installing your own Network Kernel Extension (NKE) is a
large task not to be undertaking lightly. If you're serious about
doing this, you'll want to look at some NKE examples to see what you
are in for. [I've published part of my own NKE as one such example.]
Using ipfw will be much easier, but there is a compatibility risk. As
a shared resource, UNIX ipfw is often configured by multiple programs
with conflicting models including Mac OS X itself under certain
conditions (built-in firewall prior to 10.5, or Internet Sharing). As
long as you have access to the individual machines, you may have
sufficient control to work around other programs that use ipfw, but
ensuring this in the general case can be tricky.
Kind Regards,
- Peter
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden