User configuring iptables

[Michael Schwendt]

On Wed, 16 Jun 2004 16:23:42 +0200, maynard at kopano.uct.ac.za wrote:

> Is there any way that a user can tell iptables to allow a user to specify
> additional ports to block other than the ones in the 'root' iptables
> configuration. I do not know if there are security implications in this, but all
> that iptables would have to do was to look for further disallows in the current
> user's config directory, maybe under ~/.iptables/
> 
> If this is possible coud someone please tell me how to achieve it or something
> similar.
> 
> I am trying to run firestarter as a user level application, i.e,. without
> needing the root password everytime I run it.

Still firestarter needs superuser privileges in order to be able to modify
the netfilter rules. You could disable the root password prompt for a
specific user (or all users) via PAM.