Re: [More Question] TIMEBLOCK

[Patrick Schaaf <bof@bof.de>]

>  3) When it is past 7 AM , the rule acceping telnet will be vanished by
> crond , but telnet session will be survive, because of it's session and
>  the rule accepting Established packet.

Who is forcing you to accept any established packet???

>  I want to apply drop rule to the connection still using.

A real drop would probably keep the conntrack entry sitting there
for a long time, so I would propose you use REJECT, instead, so
the endpoints of a TCP connection have a chance to notice your
timely hostility when it happens.

>  how can i do this  sustaining the Established accept rule on the top of
> FORWARD chain?

Again, who is forcing you to have an unconditional 'established' rule
on top of your forward chain?

I hope this could help you. If not, please ask again on the user mailing
list. This is no development question, all the features you need are
alreay there.

best regards
  Patrick

-- 
By the way, I'm all for Koreans learning iptables.