What is the default polic you have set for? I guess it is by dropping all the packets froom the forward chain and then you are allowing accordingly. Regards, Dharmendra.T Linux Security Expert www.nsecure.net dharmu@nsecure.net On Wednesday 13 November 2002 20:31, Raymond Leach wrote: > Hi > > Is there a way to put time restrictions on rules? > For eaxmple, something like: > > iptables -A FORWARD -i eth0 -p tcp -sport 1024: -dport 1024: -time > 0700:1700 -j DROP > > It would be nice ... > > Ray --