Blocking a user from accessing a specific port?

[ianw1974]

I'm running vmware-server under Linux, and the authentication works on port 902. What I want to do is stop a particular user from being able to connect to this port from external machines.

 

For example, if someone is using the vmware-server-console, I don't want them to use the root account to connect, and therefore deny access to this port from external IP addresses.

 

Anyone know how I could do this, or if it's possible or not?

[ianw1974]

I think I might be able to do this with iptables. Here is the rule I've written, although yet to test it because people are connected with the account I want to block, and want them to finish before I deny access, and then tell them to use another account instead.

 

Any iptables experts out there that see a problem with my rule?

 

-A OUTPUT -p tcp -m tcp --sport 902 -d 172.20.0.0/16 -m uid-owner root -j DENY