/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
> Three machines, sitting on our 10.2.1.0/24 network, need to be blocked
>access from ONLY CERTAIN websites, mainly the free webmail based ones
(Yahoo, >MSN, Hotmail), etc., etc. I still want to leave www access so they
can surf >ther things on the net (after all, we have clients that use them for
research), >but we don't want people doing personal email on business
hours. Hence the >block proposal.
So you only want to block three machines to those sites or all
of the 10.2.1.0 network?
Anyway, check out the disabled examples in TrinityOS for
DoubleCLick or AOL in both the INPUT and OUTPUT sections.
You could easily modify those rules to only filter specific
source IPs with specific destination ports (www).
> Now, ideally, I would like to control when this block happens, but I
assume
>this can easily be achieved using cron... Suggestions?
This could be handled via cron. Specifically, you could create
a separate ruleset that would INSERT (not the typical APEEND) rules
to do this filtering. When the block should be removed, just reload
the main ruleset.
Anyway.. probably the reason you didn't get a response on the
list is because this is a IPCHAINS specific questions and not
something related to IPMASQ.
--David
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
