From owner-freebsd-questions@FreeBSD.ORG  Sat Jul 29 12:18:15 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8045316A4E2
	for <freebsd-questions@freebsd.org>;
	Sat, 29 Jul 2006 12:18:15 +0000 (UTC)
	(envelope-from vpeleh@gmail.com)
Received: from ll.uar.net (LL.UAR.Net [194.44.214.9])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C717743D45
	for <freebsd-questions@freebsd.org>;
	Sat, 29 Jul 2006 12:18:14 +0000 (GMT)
	(envelope-from vpeleh@gmail.com)
Received: by ll.uar.net (Postfix, from userid 106)
	id 1E90F156; Sat, 29 Jul 2006 15:23:54 +0300 (EEST)
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on ll.uar.net
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=ham 
	version=3.1.0
Received: from [194.44.254.3] (unknown [194.44.254.3])
	by ll.uar.net (Postfix) with ESMTP id 4AE8B13D;
	Sat, 29 Jul 2006 15:23:53 +0300 (EEST)
Message-ID: <44CB5212.6010105@gmail.com>
Date: Sat, 29 Jul 2006 15:18:26 +0300
From: Pelekh Volodya <vpeleh@gmail.com>
User-Agent: Thunderbird 1.5.0.2 (X11/20060517)
MIME-Version: 1.0
To: Dan Nelson <dnelson@allantgroup.com>
References: <44C24658.5060308@gmail.com>
	<20060722174034.GD22820@dan.emsphone.com>
In-Reply-To: <20060722174034.GD22820@dan.emsphone.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
Subject: Re: IPFW Time-Range
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Jul 2006 12:18:15 -0000

Thank you for answer

I try this
thanks

Dan Nelson wrote:
> In the last episode (Jul 22), Pelekh Volodya said:
>   
>> Hi
>> My name is Volodya, i'am from Ukraine
>> I have a little question,
>> do you plan to add time-range in ipfw?
>> Something like in Cisco
>> thanks
>> wait for answer
>>     
>
> One way to do what you want is to put your time-sensitive rules in a
> separate set:
>
>  ipfw add 500 set 1 reset ip from any to any dst-port 554 // block realaudio streams
>
> Then use cron to enable/disable them during your timerange:
>
>  0 8 * * * root ipfw set enable 1
>  0 18 * * * root ipfw set disable 1
>
> You can run "ipfw -S list" to see which sets are active at any time. 
> It would be nice to have this built into ipfw, though.
>
>