OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Michael Appeldorn (appeldorncodixx.de)
Date: Wed Apr 03 2002 - 06:20:48 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    >Hi.
    >
    >I am running Suse 7.3 with Firewall 2.
    >Now i want to disable portforwarding at scheduled times, to disable Microsoft
    >Messenger from my Lan.
    >I can'r let MSN run through squid because one of the client's is a iMac and
    >the MSN client for the iMac won't allow the use of Generic Proxy.
    >
    >So i am using portformarding for that. (IP_Forward). Is there a possibility to
    >make a cron job for disabling MSN in working hours ?
    >

    So why not, edit /etc/crontab as follows

    0 20 * * * /sbin/SuSEfirewall start file /etc/rc.config.d/firewall2.rc.config.night
    0 08 * * * /sbin/SuSEfirewall start file /etc/rc.config.d/firewall2.rc.config.day

    cp to firewall.configs to day|night and adapt them

    snip /sbin/SuSEfirewall
    ------
    Options:
      start generate and load the firewall filter rules from
              /etc/rc.config.d/firewall2.rc.config
      stop unload all filter rules
      close no incoming network traffic except bootp+ping (used for boot security)
      file FILENAME same as \"start\" but load alternate config file FILENAME
      test generate and load the filter rules but do not drop any packet but log
              to syslog anything which *would* be denied
      status print the output of \"iptables -L -nv\"
      debug print the iptables command to stdout instead of executing them
      help this output

    Calling $0 without any option is the same as the \"start\" option.
    The \"file FILENAME\" option my be used with the start, test and debug options.\n"
        exit 0
    }
    ------
    snap

    Yours

    Michael Appeldorn

    -- 
    To unsubscribe, e-mail: suse-security-unsubscribesuse.com
    For additional commands, e-mail: suse-security-helpsuse.com
    Security-related bug reports go to securitysuse.de, not here