Aug 11 2009, 03:14 PM
QUOTE(raist86 @ Aug 10 2009, 10:32 PM)
i'm fed up with trying to configure the router to filter p2p.
in the end, decided to use this iptable command to block all ports except http, https, ftp, and msn.
problem is, my boss (dad) wants it to be set on a timer so that it'll only take effect during office hours and after office hours, the china workers can use the line as normal. they call download all they want and fight for the bandwidth themselves.
Is there a command/script to do that? If yes, please advice.
How about creating 2 scripts: 1 to create the iptables rules and 1 to remove it then schedule them to run in cronin the end, decided to use this iptable command to block all ports except http, https, ftp, and msn.
CODE
iptables -I FORWARD 1 -p tcp -m multiport --dport 21,80,443 -j ACCEPT
iptables -I FORWARD 2 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -I FORWARD 3 -j DROP
iptables -I FORWARD 2 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -I FORWARD 3 -j DROP
problem is, my boss (dad) wants it to be set on a timer so that it'll only take effect during office hours and after office hours, the china workers can use the line as normal. they call download all they want and fight for the bandwidth themselves.
Is there a command/script to do that? If yes, please advice.
Quote
0.0235sec
0.52
7 queries
GZIP Disabled