• # man iptables

    Posté par . En réponse au message iptables demande de conseils. Évalué à 0.

    time
    This matches if the packet arrival time/date is within a given range. All options are optional, but are ANDed when specified.

    --datestart YYYY[-MM[-DD[Thh[:mm[:ss]]]]]

    --datestop YYYY[-MM[-DD[Thh[:mm[:ss]]]]]

    Only match during the given time, which must be in ISO 8601 "T" notation. The possible time range is 1970年01月01日T00:00:00 to 2038年01月19日T04:17:07.

    If --datestart or --datestop are not specified, it will default to 1970年01月01日 and 2038年01月19日, respectively.

    --timestart hh:mm[:ss]

    --timestop hh:mm[:ss]

    Only match during the given daytime. The possible time range is 00:00:00 to 23:59:59. Leading zeroes are allowed (e.g. "06:03") and correctly interpreted as base-10.

    [!] --monthdays day[,day...]

    Only match on the given days of the month. Possible values are 1 to 31. Note that specifying 31 will of course not match on months which do not have a 31st day; the same goes for 28- or 29-day
    February.

    [!] --weekdays day[,day...]

    Only match on the given weekdays. Possible values are Mon, Tue, Wed, Thu, Fri, Sat, Sun, or values from 1 to 7, respectively. You may also use two-character variants (Mo, Tu, etc.).

    --utc

    Interpret the times given for --datestart, --datestop, --timestart and --timestop to be UTC.

    --localtz

    Interpret the times given for --datestart, --datestop, --timestart and --timestop to be local kernel time. (Default)

    EXAMPLES. To match on weekends, use:

    -m time --weekdays Sa,Su

    Or, to match (once) on a national holiday block:

    -m time --datestart 2007年12月24日 --datestop 2007年12月27日

    Since the stop time is actually inclusive, you would need the following stop time to not match the first second of the new day:

    -m time --datestart 2007年01月01日T17:00 --datestop 2007年01月01日T23:59:59

    During lunch hour:

    -m time --timestart 12:30 --timestop 13:30

    The fourth Friday in the month:

    -m time --weekdays Fr --monthdays 22,23,24,25,26,27,28


    ca devrait simplifier grandement ton code en ajoutant les contraintes de jours/heures sur les regles qui varient au cours de la journée