Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are there any firewalls for Linux that will allow one to block certain ports for a specific application while allowing other programs to use the same port, or block Internet access altogether for specific applications?

Everything based on IPTables apparently can only block ports globally for all applications.

SELinux is the only thing I've found so far that might have application-level Internet blocking capability, but it serves a broader array of security purposes and seems too complex for this task.

I don't need interactive popups like with Windows personal firewalls. I'm OK with having to edit a config file. This is for personal desktop Linux use, not a server.

share|improve this question


Detailed control over individual user and program network accesses.


AppArmor allows the system administrator to associate with each program a security profile that restricts the capabilities of that program.

share|improve this answer
AppArmor can do that? I heard about AppArmor before posting this, but didn't realize it had that capability. I guess I need to read up on it some more. – Mike Rowave May 20 '11 at 21:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .