topic Re: Time Limits Not Killing Active Connections in General Topics

Time Limits Not Killing Active Connections

Lockout888 — Tue, 17 Mar 2020 14:48:36 GMT

Hello,

I'm running R80.30 and I have a rule setup to drop any traffic from a specific IP range to the Internet, every day from Midnight until 0600.

The rule is working and does not allow any new connections during that time, but it doesn't drop active connections. In SmartView Tracker, I can see a few connections still open from that IP range, and users are still online. I have to use the Block Intruder feature and drop the connection for 5 minutes. New connections are not allowed at that point until 0600.

Is there a way for the rule to drop active connections? Or will I have to run some kind of script to accomplish this?

Re: Time Limits Not Killing Active Connections

PhoneBoy — Tue, 17 Mar 2020 21:03:13 GMT

You'll have to run some sort of script to do it.
It would probably be a fairly simple crontab using fw samp or similar.

Re: Time Limits Not Killing Active Connections

Timothy_Hall — Fri, 20 Mar 2020 14:49:19 GMT

Agree with Phoneboy here that you will need to use a script, time ranges are only checked as a rule matching condition at connection start time, and never checked again once the connection is initially allowed.

Re: Time Limits Not Killing Active Connections

Lockout888 — Thu, 10 Sep 2020 16:09:17 GMT

Thanks @PhoneBoy & @Timothy_Hall.

Would this work?

Scheduled Job on GAIA web management on Gateway. Command to run: fw sam -t 300 -J subsrc <IP> <Netmask>

Re: Time Limits Not Killing Active Connections

Lockout888 — Thu, 10 Sep 2020 16:29:51 GMT

Did some testing and it seems to work with this:

Scheduled Job on Gateway GAIA Portal. Command to run: source /etc/profile.d/CP.sh ; fw sam -t 300 -J subsrc <IP> <Netmask>