i'm fed up with trying to configure the router to filter p2p.
in the end, decided to use this iptable command to block all ports except http, https, ftp, and msn.
CODE
iptables -I FORWARD 1 -p tcp -m multiport --dport 21,80,443 -j ACCEPT
iptables -I FORWARD 2 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -I FORWARD 3 -j DROP
problem is, my boss (dad) wants it to be set on a timer so that it'll only take effect during office hours and after office hours, the china workers can use the line as normal. they call download all they want and fight for the bandwidth themselves.
Is there a command/script to do that? If yes, please advice.
This post has been edited by raist86: Aug 10 2009, 10:33 PM