Firewall Rule Schedule
-
I use time based rules in a Juniper/Netscreen Firewall for a few reasons. I cannot use captive portal because I am not limiting just port 80, I have programs that use other ports and are unattended. But I am also limiting bandwidth per rule also. So that during business hours the firewall throttles to a lower bandwitdh than during the night for those ports. Aren't online backups fun.
Instead of refreshing some web page have your cron job either modify and apply /tmp/rules.debug or directly change the running rules at the times you specify.
It would be nice, but that would mean that traffic shapper would have to be used per rule and also have sheduling.
I am not holding my breath on this feature set. :PpfSense is a good firewall and I use it in most places.
-
I am working on this right now for HEAD version. I'll keep posted how my progress goes and when it will be available in releng.