[K12OSN] OT: Limit Network Access by time

Les Mikesell les at futuresource.com
Fri Feb 27 09:20:05 UTC 2004


On Fri, 2004-02-27 at 08:09, Jim Kronebusch wrote:
> Wouldn’t the following two commands
> 0 23 * * * /sbin/ipchains -I ethout 1 -i eth1 -j DENY
> 0 23 * * * /sbin/ipchains -I ethin 1 -i eth1 -j DENY
> Completely disable the interface on all ports?  I assumed if I ran this
> on the local (Green Network for IPCop) it would disable routing
> completely.  I am not looking for a port specific block, just an entire
> shutdown.  Otherwise they will still be up all night on file sharing
> networks downloading stolen music and porn while instant messaging each
> other about what so and so said at school today.  I want the network
> dead during off hours.

On a RedHat based system you should be able to run
ifdown interface
ifup   interface
to completely deactivate it, and the ifup script
will deal with picking up a DHCP address if needed.
If you drop the inside interface you could still
receive inbound email, etc.

---
  Les Mikesell
   les at futuresource.com






More information about the K12OSN mailing list