I'm trying to stop a Torrent client from talking to certain IP ranges. The client runs as a specific user; in my case it is
500. The system has a network interface
venet0 for connecting to the internet.
If I do something like:
iptables -A OUTPUT -o venet0 -m owner --uid-owner 500 -j torrent_iprange_check iptables -A torrent_iprange_check -d 100.100.100.0/24 -j DROP iptables -A torrent_iprange_check -d 126.96.36.199/24 -j DROP iptables -A torrent_iprange_check -j ACCEPT
Is this alone sufficient to block torrent traffic to those IPs, or do I have to block on the
INPUT chain as well?