Re: forbid internet access to an application?

Bear with me I'm rather new to this. Are you trying to block applications from your user's side or from the cloud?
From your user's side - wouldn't it be possible to use rlogin (or some other method to remote login) to the host and allow Internet access only from/through the host? If so, wouldn't it also be true you could set the user/group rights (privileges) to permit only those programs which match the user/group privileges? That is make ping a root only executable so no other user/group can execute/use it.
Please excuse me if I missed your point.
Dana
.