mobility and firewall

[Dmitriy Kropivnitskiy]

On Sat, 2005-06-04 at 18:42 +1200, Christoph Georgi wrote:
> $IPTABLES -A OUTPUT -p TCP --dport http -m owner --cmd-owner firefox -j 
> ACCEPT
> 
> $IPTABLES -A OUTPUT -p TCP --dport http -m owner --cmd-owner firefox-bin 
> -j ACCEPT
> 
> That should do the trick?!

Does that actually work? Gotta try. But I still don't see any way to add
such rules dynamically, the way Zone Alarm does.