My server executes third party software which processes user submitted files. I want to block outgoing connections from my process. How can I do it in FreeBSD?
I think you're looking for a jail. This is a restrictive environment in which processes have limited access to files, networks and system settings. The handbook explains how to set up a jail. You'll want to block the jail from networking altogether with the
ipv4=disable ipv6=disable parameters to
jail, or at least restrict connectivity to a few addresses with something like
You could run this process under separate account and block traffic by UID, see
ipfw man page for