Re: Temporary blocking a host

Tom Eastep
Tue, 11 Dec 2007 19:04:25 -0000

Mirek Sobczak wrote:
> Hi,
> I''ve debian running Shorewall, with two interfaces.
> I want sometimes to block access of one host from local network to
internet.
> I''ve use command:
> shorewall drop 10.1.1.222
>
> after this that host can''t make new connection, but existing
connections
> are still active.
>
> How to brake theese active connections?
> Maybe I should use iptables directly?

Use ''cutter''.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key