Re: Patch for ipt_time (to enable start > stop / crossing midnight)

[Brad Fisher <brad@info-link.net>]

Krzysztof Oledzki wrote:

>
>
> On Wed, 4 Jan 2006, Brad Fisher wrote:
>
>> I've also sent a couple of patches to add this functionality to 
>> Fabrice and the dev list.  I'd like to see it implemented at some 
>> point, regardless of the patch used :)  Another thing I know was an 
>> issue in the past for me was a restriction on which hooks the time 
>> match was allowed in.  I believe my most recent patch (send on 
>> 12/3/2003 i think) removed those restrictions and allowed it in all 
>> hooks as well as allowing the time range to cross the midnight 
>> boundary.  Perhaps that issue has been resolved in the meantime 
>> though, I haven't checked the code recently.  I see there have also 
>> been a few others who have sent patches to  the mailing list to 
>> address this issue as well.
>
>
> Currently, according to the code, ipt_time is allowed in PREROUTING, 
> INPUT, FORWARD and OUTPUT. I believe the restriction can be relaxed in 
> 2.6.x version now since it always gets timestamp only if packets does 
> not contain one. We can fix 2.4.x version in the same way. Which other 
> hooks are also useful? There is only one left - POSTROUTING. ;)
>
> Best regards,
>
>                 Krzysztof Olędzki

I recall having problems in the mangle table, so it was probably with 
the POSTROUTING chain.  My rules depended on the dst IP after NAT was 
performed.
-Brad