You can have the user specify the modifications and have them stored in a special directory reserved for this.
Then write a cron job, which reads this directory, and does the actual modifications.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
|