Topic: How do I block all outgoing connections except port 80?

[tariqf]

I need all my users to have web access but only certain groups of people are to have external ftp access. How can I allow only a certain group of people outoing port 21?

To make matters worse, the group of people I need to allow outgoing port 21 is a windows user group on my 2003 server domain. How can I authenticate and specify this group to allow port 21?