problem with nat rule to the upgrade to version 6
Posted: Sun Dec 23, 2012 4:27 pm
I have a couple of rules designed to block access to some customers (address list) that will run from 11:00 PM until 06:00 AM the next day.
for it created a rule that blocks access from 23:00 until 23:59:59
and add a second blocking of 00:00:00 to the 06:00:00
well is not exactly a lock but a redirect to a page with notice of blocking
happens that the second rule is always red, this does not happen in version 5.23. there was some change in the way of spending time for operation of a rule in version 6x?
for it created a rule that blocks access from 23:00 until 23:59:59
Code: Select all
add action=dst-nat chain=dstnat comment=NIGHT dst-address=!172.31.255.2 protocol=tcp src-address-list=night time=23h-23h59m59s,sun,mon,tue,wed,thu,fri,sat to-addresses=172.31.255.2 to-ports=81
Code: Select all
add action=dst-nat chain=dstnat comment=NIGHT dst-address=!172.31.255.2 protocol=tcp src-address-list=night time=0s-6h,sun,mon,tue,wed,thu,fri,sat to-addresses=172.31.255.2 to-ports=81
happens that the second rule is always red, this does not happen in version 5.23. there was some change in the way of spending time for operation of a rule in version 6x?