blocking network access for a single user

You can use the iptables userid match and block all outgoing traffic initiated by that user.


iptables -I OUTPUT -o -m owner --uid-owner -j REJECT
service iptables save