Re: Firewall rules based on date/time...

Tom Eastep
Fri, 30 Jul 2004 14:15:22 -0000

Mihail Popa wrote:

Looks like Mailman''s HTML->Text converter ate your post (or you hit
<send> prematurely). At any rate, date/time based rules are available
with iptables if you patch your kernel but in keeping with my stated
policy (Shorewall contains no support for features not available in
standard kernels), there is no such support in Shorewall.

You can accomplish a similar thing by having two (or more) shorewall
configurations which you have saved to different files in
/var/lib/shorewall using the ''shorewall save'' command. A
simple cron job
can then switch between the configurations by issuing ''shorewall
restore'' commands (which are very fast).

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net