On Thursday 07 November 2002 7:28 pm, Meir Michanie wrote: > I am trying to develop a pay per routing limited by time. (lets say > 15mins) > > step 1 :the iptables should redirect all forwarding packets to my > gatekeeper site. > > step 2:after you pay I should allow youe mac address for free > forwarding. > > step 3: but adding a cron job or something like that to stop you after > 15 mins and then redirect you back to my site to pay for more time. > > step 1 is done by > > iptables -t nat -A PREROUTING -j DNAT --to-destination 10.0.10.2 > > step 2 is done by > > iptables -t nat -I PREROUTING -m mac --mac-source 00:20:18:2D:6B:20 -j > ACCEPT > > My problem is with step 3: Why not just delete the MAC-match rule you created in step 2, so that the default rule from step 1 gets used again ? iptables -t nat -D PREROUTING -m mac --mac-source 00:20:18:2D:6B:20 -j ACCEPT Antony. -- Having been asked to provide a reference for this man, I can confidently state that you will be very lucky indeed if you can get him to work for you.