time module

time module

[Tomas Charvat]

greeting folk

im just testing rule

[0:0] -A FORWARD -s 62.84.131.35 -m time  --timestart 07:00 --timestop
00:38 --days Sun,Mon,Tue,Wed,Thu,Fri,Sat -j shape

it doesnt work .. all traffic pass trough, packets just ignore it

but when i put there

[0:0] -A FORWARD -s 62.84.131.35 -m time  --timestart 07:00 --timestop
00:38 --days Sun -j shape

(only one day)
rule working properly ....


i have iptables 1.2.8 kernel 2.4.23-pre6 patched with patch-o-matic...

any tip ?

regards
tomas

Re: time module

[Jörg Schütter]

Hallo Tomas,

On Sun, 9 Nov 2003 00:48:59 +0100
"Tomas Charvat" <eaglecz@tiscali.cz> wrote:

> greeting folk
> 
> im just testing rule
> 
> [0:0] -A FORWARD -s 62.84.131.35 -m time  --timestart 07:00 --timestop
> 00:38 --days Sun,Mon,Tue,Wed,Thu,Fri,Sat -j shape

have you tryed to break the rule up in to rules?
... --timestart 07:00 --timestop 23:59 ...
... --timestart 00:00 --timestop 00:38 ...


Jörg

-- 
Jörg Schütter           http://www.lug-untermain.de/
joerg@schuetter.org     http://www.schuetter.org/joerg/
ICQ: 298982789          http://mypenguin.bei.t-online.de/

Time module

[Joe Giles]

Hello,

I have a simple question that I hope I can have answered on this list.

After fighting with the kids last school season as to what time they can 
access the internet after hours for leasure time, and loosing due to their 
inability to follow directions, I was looking into imposing a time limit for 
their access using fwbuilder, a front end to iptables.

However, after setting up a simple test rule, I noticed that the firewall 
compiler was complaining about a missing time module for iptables (I don't 
have the actual module name in hand, but can get it if its needed).

So, I went to the Netfilter web site and found the module that I needed, time 
module, and it was stated that I could get it from P-O-M. However, I 
downloaded the latest snapshot (As per the instructions) but I fail to find 
the time module in any of the repos (  submitted, pending, base, extra, 
userspace).

Could someone point me in the general, or explicit direction to where I need 
to go to get this module compiled into my kernel?

Thanks a million!!!

Joe Giles

time module

[richard lucassen]

I try to compile iptables-1.3.7 with the time module. AFAICS there is no
need anymore for the patch-o-matic. There is a libipt_time.c in the
extensions directory but no libipt_time.h in the
include/linux/netfilter_ipv4 directory.

I searched here and there and found the extensions/Makefile. I added the
time module to this Makefile, but with this result:

Unable to resolve dependency on linux/netfilter_ipv4/ipt_time.h.

Anyone a hint?

R.

-- 
___________________________________________________________________
It is better to remain silent and be thought a fool, than to speak
aloud and remove all doubt.

+------------------------------------------------------------------+
| Richard Lucassen, Utrecht                                        |
| Public key and email address:                                    |
| http://www.lucassen.org/mail-pubkey.html                         |
+------------------------------------------------------------------+

Re: time module

[Jan Engelhardt]

On Mar 13 2007 10:16, richard lucassen wrote:

>Date: Tue, 13 Mar 2007 10:16:04 +0100
>From: richard lucassen <mailinglists@lucassen.org>
>Reply-To: netfilter@lists.netfilter.org
>To: netfilter@lists.netfilter.org
>Subject: time module
>
>I try to compile iptables-1.3.7 with the time module. AFAICS there is no
>need anymore for the patch-o-matic. There is a libipt_time.c in the
>extensions directory but no libipt_time.h in the
>include/linux/netfilter_ipv4 directory.
>
>I searched here and there and found the extensions/Makefile. I added the
>time module to this Makefile, but with this result:
>
>Unable to resolve dependency on linux/netfilter_ipv4/ipt_time.h.
>
>Anyone a hint?

You still have to apply ipt_time to the kernel.


Jan
-- 

Re: time module

[richard lucassen]

On Wed, 14 Mar 2007 03:11:07 +0100 (MET)
Jan Engelhardt <jengelh@linux01.gwdg.de> wrote:

> >Unable to resolve dependency on linux/netfilter_ipv4/ipt_time.h.
> >
> >Anyone a hint?
> 
> You still have to apply ipt_time to the kernel.

Ok, thnx. I'll search for the patch.

-- 
___________________________________________________________________
It is better to remain silent and be thought a fool, than to speak
aloud and remove all doubt.

+------------------------------------------------------------------+
| Richard Lucassen, Utrecht                                        |
| Public key and email address:                                    |
| http://www.lucassen.org/mail-pubkey.html                         |
+------------------------------------------------------------------+

Re: time module

[richard lucassen]

On Wed, 14 Mar 2007 03:11:07 +0100 (MET)
Jan Engelhardt <jengelh@linux01.gwdg.de> wrote:

> >Unable to resolve dependency on linux/netfilter_ipv4/ipt_time.h.
> >
> >Anyone a hint?
> 
> You still have to apply ipt_time to the kernel.

Just for information to the list (vanilla kernel 2.6.20.3). I sent a
copy to Fabrice.

[..]
CC [M]  net/ipv4/netfilter/ipt_time.o
net/ipv4/netfilter/ipt_time.c: In function ___match___:
net/ipv4/netfilter/ipt_time.c:69: error: ___const struct sk_buff___ has
no member ___named stamp___
net/ipv4/netfilter/ipt_time.c: At top level:
net/ipv4/netfilter/ipt_time.c:128: warning: initialization from
incompatible pointer type
net/ipv4/netfilter/ipt_time.c:128: warning: initialization from
incompatible pointer type
net/ipv4/netfilter/ipt_time.c:128: warning: initialization from
incompatible pointer type
make[4]: *** [net/ipv4/netfilter/ipt_time.o] Error 1
make[3]: *** [net/ipv4/netfilter] Error 2
make[2]: *** [net/ipv4] Error 2 
make[1]: *** [net] Error 2
make[1]: Leaving directory `/usr/src/linux-2.6.20.3'
make: *** [debian/stamp-build-kernel] Error 2

-- 
___________________________________________________________________
It is better to remain silent and be thought a fool, than to speak
aloud and remove all doubt.

+------------------------------------------------------------------+
| Richard Lucassen, Utrecht                                        |
| Public key and email address:                                    |
| http://www.lucassen.org/mail-pubkey.html                         |
+------------------------------------------------------------------+