Okay guys. Thanks for the suggestion. Regards, Stefan
________________________________ From: Christiano F. Haesbaert <haesba...@openbsd.org> To: Stefan N <stefanbsd...@yahoo.com> Cc: "misc@openbsd.org" <misc@openbsd.org> Sent: Friday, September 2, 2011 8:34 PM Subject: Re: Time interval based pf rule On 2 September 2011 09:26, Stefan N <stefanbsd...@yahoo.com> wrote: > Actually I would like to limit the access during office hour. > So Time interval base rule means: > user is only allowed to access specific application and destination based > from the time interval. > For example: Finance Department user is only allowed to access facebook > website after office hour (after 6PM onwards) and only on friday. > > If I didn't add the time interval, they can spend their time for browsing and > chatting on facebook instead of working. > What do you mean by "one-hit" rules? > Rules that get destroyed after a first match, but that's not what you want. anchors + crontab as Peter suggested is an easy alternative.