Banning Local User For Accessing Internet

[bec]

Hi,

I would like to ban an address access to the internet during a specific period (2200 - 0700), but in that period allow access to send & receive mail (ports 25 & 110??)

I have figured out the first part:
bl,192.168.101.101,2200,0700

How do I allow the specific ports? Is it:
alp,25,192.168.101.101
alp,110,192.168.101.101

Does this work when it's all put together?

I seem to have times when the time based banning doesn't kick in automatically. Is there a job that needs to be running to kick in the time based banning?

Thanks for your help.

Brian

[Lightning]

For this type of configuration I would put the times on the port setting as well. So you would have something like

bl,192.168.101.101,2200,700
alp,25,192.168.101.101,2200,700
alp,110,192.168.101.101,2200,700

Also note that it is 700 and not 0700

[psv]

whether there is a difference what rule is the first ???

[Lightning]

The order you put the rules does not matter. The system sorts the rules automatically and puts "allow" rules before "deny" rules.