Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #170826

Re: Limiting internet access by time

From Mark Fletcher <mark27q1@gmail.com>
Newsgroups linux.debian.user
Subject Re: Limiting internet access by time
Date 2016-08-08 02:10 +0200
Message-ID <s3GiJ-2lS-1@gated-at.bofh.it> (permalink)
References (5 earlier) <s2RpU-2az-11@gated-at.bofh.it> <s32lj-18m-5@gated-at.bofh.it> <s3kBz-4Oe-1@gated-at.bofh.it> <s3n6q-6Fk-1@gated-at.bofh.it> <s3AQ2-7g8-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Mon, 8 Aug 2016 at 03:15, Brian <ad44@cityscape.co.uk> wrote:

> On Sun 07 Aug 2016 at 03:32:00 +0000, Mark Fletcher wrote:
>
> > In the end I got what I needed by using Lars' pointer of the iptables
> > extensions. I copied the iptables systemd service unit from my LFS box to
> > the machine in question, and then created a script in
> /etc/systemd/scripts
> > that first sets the iptables output chain policy to DROP, then adds these
> > rules:
> >
> > iptables -A OUTPUT -m time --starttime 00:00 --stoptime 12:00 -j ACCEPT
> > iptables -A OUTPUT -d 192.168.11.0/24 -j ACCEPT
>
> Would being able to alter UTC from the BIOS be reckoned to be a strong
> technical skill? And, more to the point, would it work in your situation?
>
>
I don't think it would since ntp would just change it back on boot.

Now, telling Linux that the bios clock isn't utc -- now that would eff
things up. But if he gets the access he'd need to do that all bets are off
anyway as he could just change the firewall rules.

Mark

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Limiting internet access by time Mark Fletcher <mark27q1@gmail.com> - 2016-08-05 02:10 +0200
  Re: Limiting internet access by time Lars Noodén <lars.nooden@gmail.com> - 2016-08-05 09:30 +0200
    Re: Limiting internet access by time Mark Fletcher <mark27q1@gmail.com> - 2016-08-05 17:40 +0200
  Re: Limiting internet access by time Brian <ad44@cityscape.co.uk> - 2016-08-05 12:50 +0200
    Re: Limiting internet access by time Lisi Reisz <lisi.reisz@gmail.com> - 2016-08-05 13:10 +0200
      Re: Limiting internet access by time Brian <ad44@cityscape.co.uk> - 2016-08-05 16:10 +0200
        Re: Limiting internet access by time David Wright <deblis@lionunicorn.co.uk> - 2016-08-05 18:00 +0200
        Re: Limiting internet access by time Mark Fletcher <mark27q1@gmail.com> - 2016-08-05 18:00 +0200
          Re: Limiting internet access by time Dan Ritter <dsr@randomstring.org> - 2016-08-05 19:50 +0200
            Re: Limiting internet access by time Brian <ad44@cityscape.co.uk> - 2016-08-05 21:10 +0200
              Re: Limiting internet access by time Brian <ad44@cityscape.co.uk> - 2016-08-06 03:40 +0200
            Re: Limiting internet access by time Mark Fletcher <mark27q1@gmail.com> - 2016-08-06 07:30 +0200
              Re: Limiting internet access by time Dan Ritter <dsr@randomstring.org> - 2016-08-07 03:00 +0200
                Re: Limiting internet access by time Mark Fletcher <mark27q1@gmail.com> - 2016-08-07 05:40 +0200
                Re: Limiting internet access by time Brian <ad44@cityscape.co.uk> - 2016-08-07 20:20 +0200
                Re: Limiting internet access by time Mark Fletcher <mark27q1@gmail.com> - 2016-08-08 02:10 +0200
                Re: Limiting internet access by time Dan Ritter <dsr@randomstring.org> - 2016-08-09 19:30 +0200
                Re: Limiting internet access by time Stefan Monnier <monnier@iro.umontreal.ca> - 2016-08-09 21:20 +0200
                Re: Limiting internet access by time Dan Ritter <dsr@randomstring.org> - 2016-08-10 15:40 +0200
                Re: Limiting internet access by time Stefan Monnier <monnier@iro.umontreal.ca> - 2016-08-10 17:00 +0200
                Re: Limiting internet access by time Dan Ritter <dsr@randomstring.org> - 2016-08-10 18:10 +0200
                Re: Limiting internet access by time Stefan Monnier <monnier@iro.umontreal.ca> - 2016-08-10 22:40 +0200
          Re: Limiting internet access by time Brian <ad44@cityscape.co.uk> - 2016-08-05 20:50 +0200
            Re: Limiting internet access by time Mark Fletcher <mark27q1@gmail.com> - 2016-08-06 07:30 +0200
      Re: Limiting internet access by time Mark Fletcher <mark27q1@gmail.com> - 2016-08-05 16:30 +0200
        Re: Limiting internet access by time pv29@gatech.edu - 2016-08-08 01:10 +0200
          Re: Limiting internet access by time Curt <curty@free.fr> - 2016-08-08 09:00 +0200
            Re: Limiting internet access by time pascalv@sdf.org - 2016-08-08 10:30 +0200
              Re: Limiting internet access by time Karol Augustin <karol@augustin.pl> - 2016-08-08 12:00 +0200

csiph-web