Temporary blocking a host

Mirek Sobczak
Tue, 11 Dec 2007 19:02:54 -0000

Hi,
I''ve debian running Shorewall, with two interfaces.
I want sometimes to block access of one host from local network to internet.
I''ve use command:
shorewall drop 10.1.1.222

after this that host can''t make new connection, but existing
connections
are still active.

How to brake theese active connections?
Maybe I should use iptables directly?

Regards
Mirek