Re: Iptables "-m time" option doesn't update when the clock changes

[Jan Engelhardt <jengelh@xxxxxxxxxx>]

On Thursday 2012-03-29 11:10, Sebastian Arcus wrote:

> I'm using the following line in my iptables firewall to block internet access
> for one of the machines on the network for one hour a day:
>
> Code:
>
> iptables -A FORWARD -p ALL -o $INET_IFACE -m mac --mac-source $BLOCKED_MAC1 -m
> time --timestart $BLOCKED_TIMESTART1 --timestop $BLOCKED_TIMESTOP1 -j DROP
>
>
> Everything works fine - except that when the clocks change from winter time to
> summer time (in UK) - the rule keeps on working on the old time.

This is documented behavior, see manpage (preferably that of a recent 
release).
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html