Firewall scheduler question...

RouterOS General
1

Here’s my problem(s) in a nutshell. I want to disable network activities between 2 specific times. I have kids that don’t seem to know what time it is while playing on the web. So to make sure that they know when their bedtime is. the net goes down. Also I would like to know if there is a way to setup a address list for creating a simple queue.

Problem 1

Right now I manually enable the firewall filter rules at the scheduled time.

[admin@MikroTik] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=forward action=drop protocol=tcp 
     src-address=192.168.11.100-192.168.11.199 

 1   chain=forward action=drop protocol=udp 
     src-address=192.168.11.100-192.168.11.199

I would like to have them enabled automatically using the time config under the Extra tab when creating a firewall rule. The problem is that it cannot or is unable to take time in the format of 21:00 - 07:00. I will give me an error stating that the first number cannot be larger than the second.

Couldn't change Firewall Rule <192.168.11.100-192.168.11.199> - start time is bigger than end time (6)

Would setting the Action to Accept from 07:00 - 21:00 block net access for the scheduled time? (I tried it once and it didn’t appear to work)

Problem 2

Is there a way to create a address list (eg 192.168.11.100-192.168.11.199) when creating a simple queue. I have looked everywhere but I’m unable to find anything.

Any help would be appreciated. Thanks in advance.

2

Anyone?

3

This might work for you. You could modify the src-mac-address with src-address or src-address-list if you want.

http://www.cbrown.co/2011/11/05/disable-access-during-certain-hours/

4

I use 2 filter rules (one on each side of your time window) with a src-address list currently.

Assuming you want the other hosts on the network to function. I imagine another way you could do it is a filter rule to accept marked packets and then a deny all after that. Then 2 mangle rules to mark them. One with the whole subnet excluding the address list of your scheduled ones. and then one on a schedule with the src-address list for the time window you want to allow.