Re: [ ipcop-Bugs-3403666 ] IPCOP 1.9.19 Firewall rules time zone activation

Hi Achim

I've replicated the problem here, and i think part of the problem may
be in the puzzleFWrules.pl script:

@@ -1258,7 +1258,7 @@
             #			print "minute < \n";
         }
         elsif ($hour == $endHour) {    # check if we are in end hour
-            return 0 if ($endMinute < $minute);
+            return 0 if ($endMinute <= $minute);

             #			print "minute > \n";
         }

But I have also noticed that the script does not run the
endHour/endMinute update when the rules need to be updated when the
startHour is greater than the endHour. It is not detecting an update
is required, so the rule is not de-activated.

I'll keep looking to see if I can work out why...

Eric



On 3 September 2011 14:11, SourceForge.net <[email protected]> wrote:
> Bugs item #3403666, was opened at 2011-09-03 15:11
> Message generated for change (Tracker Item Submitted) made by dummy321
> You can respond by visiting:
> https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3403666&group_id=40604
>
> Please note that this message will contain a full copy of the comment thread,
> including the initial issue submission, for this request,
> not just the latest update.
> Category: General
> Group: None
> Status: Open
> Resolution: None
> Priority: 5
> Private: No
> Submitted By: Dummy (dummy321)
> Assigned to: Nobody/Anonymous (nobody)
> Summary: IPCOP 1.9.19 Firewall rules time zone activation
>
> Initial Comment:
> I use IPCOP to control my kid's access to the internet. I created rules on the firewall rules page which are activated by time zones which vary daily. The rules control access for PC's on the local lan (green) by MAC address. A typical example will be to block all ports and protocols from the green interface to the red interface from say 21h00 to 23h55 and then from 00h00 to 17h00 for a given MAC address. This means they have access from 17h00 to 21h00. The rule is perfectly activated at 21h00 and their access is controlled as per intention (Access denied). However, the rule activation at 17h00 is not activated (Access Allowed) and I have to manually disable and then enable it again on the firewall rules page. This indicates that the Cron job does not interpret the rules correctly and do
 es not open the ports/updates the iptables as intended. However, when I disable/enable manually the rule, the iptables are immediately updated. I have 2 kids with their PC and another PC that is not blocked. This means there are in total 4 rules per a single day.
>
> ----------------------------------------------------------------------
>
> You can respond by visiting:
> https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3403666&group_id=40604
>
> ------------------------------------------------------------------------------
> Special Offer -- Download ArcSight Logger for FREE!
> Finally, a world-class log management solution at an even better
> price-free! And you'll get a free "Love Thy Logs" t-shirt when you
> download Logger. Secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsisghtdev2dev
> _______________________________________________
> IPCop-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>

------------------------------------------------------------------------------
Special Offer -- Download ArcSight Logger for FREE!
Finally, a world-class log management solution at an even better 
price-free! And you'll get a free "Love Thy Logs" t-shirt when you
download Logger. Secure your free ArcSight Logger TODAY!
http://p.sf.net/sfu/arcsisghtdev2dev