Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Jun 2002 11:04:00 +0100
From:      Ceri Davies <setantae@submonkey.net>
To:        Darren Pilgrim <dmp@pantherdragon.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: "Login for services" ipf/ipfw rule creation?
Message-ID:  <20020617100400.GB6360@submonkey.net>
In-Reply-To: <3D0DB0DC.2A7F8E1E@pantherdragon.org>
References:  <3D0DB0DC.2A7F8E1E@pantherdragon.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jun 17, 2002 at 02:50:20AM -0700, Darren Pilgrim wrote:
> I have this idea to let people gain access to my server.  The idea is to
> have a web-page where they enter their username and password, and select
> which services they want access to and for how long.  The script would
> then create a stateful firewall rule for the IP address the user logged
> in from that would be removed after the period specified.
> 
> I know ipfw doesn't have the ability to flush the static and dynamic
> rules seperately, but that ipf does.  Can I use both ipfw and ipf
> simutaneously, or is it an either/or deal?

I'm pretty sure it's either/or.

> Is there any functionality in ipf to remove a rule after a period of
> time, or would I need to add cron jobs to remove the rule?

You'd be better off using at rather than cron I think.

Ceri

-- 
you can't see when light's so strong
you can't see when light is gone

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020617100400.GB6360>