Okay guys. Thanks for the suggestion.

Regards,
Stefan



________________________________
From: Christiano F. Haesbaert <haesba...@openbsd.org>
To: Stefan N <stefanbsd...@yahoo.com>
Cc: "misc@openbsd.org" <misc@openbsd.org>
Sent: Friday, September 2, 2011 8:34 PM
Subject: Re: Time interval based pf rule

On 2 September 2011 09:26, Stefan N <stefanbsd...@yahoo.com> wrote:
> Actually I would like to limit the access during office hour.
> So Time interval base rule means:
> user is only allowed to access specific application and destination based 
> from the time interval.
> For example: Finance Department user is only allowed to access facebook
> website after office hour (after 6PM onwards) and only on friday.
>
> If I didn't add the time interval, they can spend their time for browsing and 
> chatting on facebook instead of working.
> What do you mean by "one-hit" rules?
>
Rules that get destroyed after a first match, but that's not what you want.

anchors + crontab as Peter suggested is an easy alternative.

Reply via email to