Firewall Problem??

Hello,

I have a problem with the Firewall on MT RC5.
I drop all P2P and works fine.
If I set the rule with time (01:00 - 06:00) the Firewall don’t drop P2P.
Can anybody help me??
I want drop P2P from 06:00am to 01:00am.
The time between 01:00 - 06:00 P2P allow.

I hope you can understand me, my english is bad :slight_smile:

U cannot drop “connection estabilisched”, try to reboot RB at 01:00 and 06:00 this work fine.
Otherwise, set TCP Estabilisced Timeout= 00:01:00. After 1 min & with firewall P2P lock, estabilisched connection automatically dropped.
Regards

That means, that the time feature not work with P2P.
for which is this feature good??

what he is saying is you cannot drop connections that are already astablished. unless you reboot the router…


Randy

Otherwise, set TCP Estabilisced Timeout= 00:01:00. After 1 min & with
firewall P2P lock, estabilisched connection automatically dropped.


yes that’s right, but he forgot to add something: ALL connections which are -inactive- for 1 minute, WILL DROP !!!


Thus, all your clients with ICQ, IRC, other chat programs etc, etc, WILL HAVE PROBLEM if they don’t type anything for one minute !!!


DON’T DO THAT !!! We’ve learned the hard way.

What can I do ??
This is not a good idea to set TCP Estabilisced Timeout= 00:01:00, because I have a lot of clients that use ICQ.MSN and other chat programm.
Can I use an other solution??

Apply rule then reboot…

I have found an othe solution.

/ip firewall mangle add p2p=all-p2p mark-connection=p2p-con disabled=no
/ip firewall filter add connection=p2p-con action=drop

I have set time at the magle rule.
Now work fine :wink:

Thank