time base restriction for internet ?

LinuxLover · 06-10-2009, 12:28 AM

Hi I am using squid in RHEL4 for net traffic and able to restrict traffic of port 80 by time base ACL.

But so for I am unable to time base restrict the traffic for other ports like port 443 , 5190 , 1863 etc

I am not using masquerade , instead forwarding every ip (for better control ) like

Code:

-A FORWARD -s 17x.x.53.54 -p tcp -m tcp --dport 443 -j ACCEPT

-A FORWARD -s 17x.x.53.54 -p tcp -m tcp --dport 1863 -j ACCEPT

-A FORWARD -s 17x.x.53.54 -p tcp -m tcp --dport 5190 -j ACCEPT
.
.
.
.

and at end

-A FORWARD -p tcp -m tcp --dport 443 -j DROP 
-A FORWARD -p tcp -j DROP 
-A FORWARD -p udp -j DROP

Now problem is that I want to allow above mentioned trafic from 9 to 5 pm only, and should be restricted for rest of the hours.

How to accomplish this task?

FragInHell · 06-10-2009, 01:25 AM

Put your firewall rules into cron as scripts, that way you can switch then on and off as you need.

LinuxLover · 06-10-2009, 01:33 AM

Thanks for your reply,

I have this idea in mind and can enable rule by a script through cron.

But not sure how to disable them because there are 200+ lines in iptables and line numbers also changes when new rule inserted/added. so that disturb the sequence of line.

your_shadow03 · 06-10-2009, 01:36 AM

LinuxLover if you dont mind..can you explain me more regarding this:

Code:

forwarding every ip (for better control ) like

What is the full command? Explanation too is welcome.
please sugest.