Re: Firefox configuration management

>    # this will allow firefox to contact your proxy through port 8080
>    iptables -A OUTPUT -p TCP --dport 8080 127.1.1.1 -m owner -d
> --uid-owner cff -j ACCEPT

>    # this will stop all other communications with potentially cretinous slobs
>    iptables -A OUTPUT -p TCP -m owner --uid-owner cff -j DROP

>>I looked in the man page, and it looks right to me:
>>        --uid-owner userid
>>               Matches if the packet was created by a process with the
>>given effective user id.

>>>      I am assuming you are running Squid and DansGaurdian as a
>>>different user than firefox(  if not you should change it ).  You
>>>should set iptables to block all packets with destination other than
>>>localhost:8080 from your browser user( use --uid-owner <firefoxuser>
>>>switch ).  This will also stop them from using other applications to
>>>contact internet services of ill repute.