Limiting what IP curlopt_interface can use per client

[crspyjohn]

I'm having a problem where my customers are able to bind their php scripts to any IP address assigned to the server. Is there a way to limit which IP address can be used for outgoing network connections per account? Ideally, I would like to limit them to the shared server IP and their dedicated IP address...

// Set IP for outgoing network connection
$IPS = Array('199.167.133.17','199.167.133.20','199.167.1 33.21','199.167.133.22');
srand(time()); //seed start of PRNG
$ip = $IPS[ rand(0, count($IPS)-1) ];

$toSet[CURLOPT_INTERFACE] = $ip;

 

[chatwizrd]

Use a firewall.

 

[crspyjohn]

Use a firewall.

Could you explain a little bit more? I'm not sure how to limit CURLOPT_INTERFACE with the firewall.

 

[chatwizrd]

http://linuxpoison.blogspot.com/2010/11/how-to-limit-network-access-by-user.html

 

[crspyjohn]

http://linuxpoison.blogspot.com/2010/11/how-to-limit-network-access-by-user.html

Thannk you! Any reason why DirectAdmin doesn't do this by default?

 

[nobaloney]

DirectAdmin runs on both Linux and FreeBSD, and since the firewall methodology is completely different, leaves firewalling to the administrator, depending on which OS he or she selects.

Jeff