I think it would be useful if the rules for ipfilter supported a set of
time-related commands, such as year, month, day, dayofweek, hour and
minute. Then you could set up rule sets that applied only on certainly
days, or certain time periods during the day.
Checkpoint supports something like this:
http://www.checkpoint.com/support/technical/online_ug/time.html#3101
and I'm told some Cisco products too.
I often wish ipfilter did too.
Sometimes I have set up rules that I would only like to last a week or
so, when perhaps someone is given temporary access to a computer. Rather
than try to remember to remove the rule, something like:
pass in quick on tun0 proto tcp from 123.123.123.123 to 20.20.20.1/32
port = 22 year = 2005 month = 10 day < 20 keep state
to allow ssh access from 123.123.123.123 between 1st October 2005 and
19th October 2005.
--
David Kirkby,
G8WRB
Please check out http://www.g8wrb.org/
of if you live in Essex http://www.southminster-branch-line.org.uk/
