On Mon, Dec 25, 2006 at 08:37:04PM -0800, Tom Eastep wrote:
> 
> eliud Kataraihya wrote:
> 
> > Any one who can help me on how to configure my shorewell firewall in a two
> > interface Card (eth0 and eth1) So that i can be able to allow internet
> > access only during none office hours like early in the morning ,lunch time
> > and evenings.
> >
> > (ie Time Based Configuration for  internet access via firewall.)
> 
> Shorewall supports:
> 
> - Multiple configurations
> (http://www1.shorewall.net/configuration_file_basics.htm#Levels)
> - Multiple saved configurations
> (http://www1.shorewall.net/starting_and_stopping_shorewall.htm#Saved)
> 
> And the 'cron' utility allows commands to be run at a particular time each
> day. Given these facts, the answer should be obvious...

Or for a different approach (under the assumption that when you said
"internet access" you actually meant "web access"), run squid,
configure shorewall so that access to the web is only possible via
squid, and configure squid with time-based acls.

Offhand, I don't see any particular advantages of either approach over
the other for the stated problem. Squid's acls are capable of a lot
more in general though, if you ever wanted to define more complex
access rules.

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to