How to block a program from accessing the Internet?

Question

linux

How to block a program from accessing the Internet?

Answer 1

1. Filter by owner: iptables -m owner -h
2. Use cgroups and filter by them: iptables -m cgroup -h
3. Use separate network namespace without internet access: ip help netns
4. Use docker with none network: docker run -it --net=none my_awesome_image_for_application