View Single Post
  #1   (View Single Post)  
Old 24th January 2012
sws sws is offline
Port Guard
 
Join Date: Mar 2011
Posts: 12
Default Cutting stateful connections

Hello,

I want my kids to use the internet only between 19:00 h and 21:00 h. So I created an anchor which is activated by cron accordingly. Blocking my kids IPs works by and large.

But what about stateful connections? If my son for example is using Skype while the pass rules are disabled (at 21:00 h) he is still able to use Skype after his IP is blocked by PF. Same phenomen appears for online games (Fiesta and the likes).

How do I cut all connections of the IPs in question when they are blocked?

Here is my anchor for passing my kid's IPs:

Quote:
int_if="re0"
int_net="192.168.0.0/24"
ext_if="fxp0"
kinder="{ 192.168.0.3, 192.168.0.4 }"
block drop in quick on $int_if inet from $kinder to any
Greets,
Sebastian
Reply With Quote