On Friday 25 June 2004 6:32 pm, m.barýþ demiray wrote:
> Hi all!
> This is not a technical problem in fact, only my
> curiousty. I applied the time patch with patch-o-matic
> and test it with a rule like
>
> iptables -A INPUT -p icmp -m time --timestart 14:44
> --timestop 14:55 --days Fri -j DROP
>
> When the current time is passing the start time
> (packages will be matched and dropped soon) and the
> stop time (they'll be free to pass again) there is
> about 1 min. delay between these two process. For
> example, when it's 14:55, then the icmp packages
> shouldn't be matched anymore but they are dropped till
> it's about 14:56. Why?
I think the timestart will match as long as the hours=14 and the minutes=44
(ie at 14:44:00), and the timestop will match until after the hours=14 and
the minutes=55 (ie: just gone 14:55:59).
If you want exactly ten minutes of blocked packets, specify --timestart 14:44
--timestop 14:54 (ie: ten minutes' difference between the two times)
Regards,
Antony.
--
Anything that improbable is effectively impossible.
- Murray Gell-Mann, Nobel Prizewinner in Physics
Please reply to the list;
please don't CC me.
