I would like to get Skype working with
iptables and don't want to allow a huge range of ports thus I thought a solution might be
iptables -A OUTPUT -m owner --gid-owner skypeGrp -j ACCEPT iptables -A INPUT -m owner --gid-owner skypeGrp -j ACCEPT
where in advance I had created a group called
skypeGrp and then put the skype application into it:
sudo addgroup skypeGrp sudo usermod some_username -G skypeGrp sudo chgrp skypeGrp /usr/bin/skype
Shouldn't this work?
I think another key insight here to make the method I originally outlined in my question work, is to realise that it
active group that
iptables takes notice of. Thus my user doesn't just have to belong to the
skypeGrp, this also must be his
active group at the time of running
Skype (see here for more).