Further adventures in Firewall upgrades

[enigma at riddlefixer.com]

I have been toying with halted firewalls and saw this posted on
your list:

----- Original Message ----- 
From: "Jonathan Hutchins" <hutchins at opus1.com>
> Thinking on this, with a live machine you can run timed scripts to do
> things like allow connections from The Office, but only between 8:00 
> and 5:00 'cause otherwise the office is closed. 

iptables has support for these types of rules, but I guess over time,
if your system clock is not accurate, you will need to reboot just to
set your clock so that access times are not too far askew.

Since you are trying to avoid userspace, ntp should not be used.

Cheers,
Ed

-- 
Ed Riddle
enigma at riddlefixer.com   
http://www.riddlefixer.com