Iptables "-m time" option doesn't update when the clock changes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm using the following line in my iptables firewall to block internet access for one of the machines on the network for one hour a day:

Code:

iptables -A FORWARD -p ALL -o $INET_IFACE -m mac --mac-source $BLOCKED_MAC1 -m time --timestart $BLOCKED_TIMESTART1 --timestop $BLOCKED_TIMESTOP1 -j DROP


Everything works fine - except that when the clocks change from winter time to summer time (in UK) - the rule keeps on working on the old time. The clock of this server (checked with "date") updates correctly. If I restart the server - the rule finally starts working on the correct time. Last year when this happened, I posted here and I was advised to change the hardware clock to UTC (from local time) - which I did. However, now that the clock just changed again from winter time to summer time - the user is complaining again that their Internet access slot is off by an hour.

Does anybody know why is this happening?
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux