Firewall, blocking processes from accessing the network?

[duby2291]

I have a question that is kind of a rehash from a few months ago. I still havent solved this problem effectively, so here I am again.

The title pretty much says it all. I have a program that I want to block from accessing the network. I could block the port, but I dont want to block all traffic to that port, just traffic from that one process. That's it, nothing more. I just want to block one single program from ever accessing the network.....

I've spent hours looking into this, for months now and I have asked this question on at least 4 boards,and never found a good solution. netstat -p gives a good list of processes that are accessing the network, but how can I leverage this to block a program? What else can I do?

I'm frustrated as hell. Something as simple and ordinary as blocking a program from accessing the network, is impossible in Linux. I mean really? Could it really be true that you cant block a program from accessing the network? I mean really? Come on, there has to be some way of doing it.

Sorry for ranting. I dont mean no harm, please help a frustrated noob if you have the knowledge to share.

[Hu]

Is it not possible to configure the program not to make the connection? If the author provided no configuration, you may be able to patch the program prior to building it, so that it does not make the offending network call.