killing an existing connection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thursday 07 November 2002 7:28 pm, Meir Michanie wrote:

> I am trying to develop a pay per routing limited by time. (lets say
> 15mins)
>
> step 1 :the iptables should redirect all forwarding packets to my
> gatekeeper site.
>
> step 2:after you pay I should allow youe mac address for free
> forwarding.
>
> step 3: but adding a cron job or something like that to stop you after
> 15 mins and then redirect you back to my site to pay for more time.
>
> step 1 is done by
>
> iptables  -t nat -A PREROUTING -j DNAT --to-destination 10.0.10.2
>
> step 2 is done by
>
> iptables -t nat -I PREROUTING -m mac --mac-source 00:20:18:2D:6B:20 -j
> ACCEPT
>
> My problem is with step 3:

Why not just delete the MAC-match rule you created in step 2, so that the 
default rule from step 1 gets used again ?

iptables -t nat -D PREROUTING -m mac --mac-source 00:20:18:2D:6B:20 -j
ACCEPT

Antony.

-- 

Having been asked to provide a reference for this man,
I can confidently state that you will be very lucky indeed
if you can get him to work for you.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux