Re: Limiting internet access by time

2016-08-10 Thread Stefan Monnier
>> What kind of AP would consume 20W? Mine consumes around 5W and that includes >> a 2TB disk attached to it (and spinning). > An Asus RT-N56U needs 30W max. A Linksys EA6900 needs 42W. I'm not concerned about max consumption. I'm talking about 24/7 consumption (i.e. the impact on the monthly kW

Re: Limiting internet access by time

2016-08-10 Thread Dan Ritter
On Wed, Aug 10, 2016 at 10:51:03AM -0400, Stefan Monnier wrote: > > a maximum consumption of about 3W, and has no configuration at > [...] > > A typical AP needs 10-20W, > > What kind of AP would consume 20W? Mine consumes around 5W and that includes > a 2TB disk attached to it (and spinning). A

Re: Limiting internet access by time

2016-08-10 Thread Stefan Monnier
> a maximum consumption of about 3W, and has no configuration at [...] > A typical AP needs 10-20W, What kind of AP would consume 20W? Mine consumes around 5W and that includes a 2TB disk attached to it (and spinning). > and has an expected lifetime of 1-4 years. Where do you get those numbers?

Re: Limiting internet access by time

2016-08-10 Thread Dan Ritter
On Tue, Aug 09, 2016 at 03:14:27PM -0400, Stefan Monnier wrote: > > Nope. Buy a $20 5-8 port ethernet switch. Very reliable. That's > > in the diagram above as "switch". > > But it also means one more box. If you had one box before, that doubles > the number of boxes, and might also double the 24

Re: Limiting internet access by time

2016-08-09 Thread Stefan Monnier
> Nope. Buy a $20 5-8 port ethernet switch. Very reliable. That's > in the diagram above as "switch". But it also means one more box. If you had one box before, that doubles the number of boxes, and might also double the 24/7 power consumption. Stefan

Re: Limiting internet access by time

2016-08-09 Thread Dan Ritter
On Sun, Aug 07, 2016 at 03:32:00AM +, Mark Fletcher wrote: > On Sun, Aug 7, 2016 at 9:57 AM Dan Ritter wrote: > > > On Sat, Aug 06, 2016 at 04:56:06AM +, Mark Fletcher wrote: > > > On Sat, Aug 6, 2016 at 2:48 AM Dan Ritter wrote: > > > > Got it. You can change that by removing NAT from t

Re: Limiting internet access by time

2016-08-08 Thread Karol Augustin
On 2016-08-08 8:30, pasc...@sdf.org wrote: > On Mon, 8 Aug 2016, Curt wrote: >> >> I haven't been following the thread (discussion beyond my technical >> reach) but couldn't the little man boot up a live cd or usb drive and >> surf his little heart out? Someone talked about targeting the MAC >> ad

Re: Limiting internet access by time

2016-08-08 Thread pascalv
On Mon, 8 Aug 2016, Curt wrote: On 2016-08-07, p...@gatech.edu wrote: On Fri, 5 Aug 2016 at 20:00, Lisi Reisz wrote: Perhaps he wants to stop his children/grandchildren/house guests surfing the web at 3:00 am. Spot on, Lisi! Hello, If the computer is not supposed to be connected a

Re: Limiting internet access by time

2016-08-07 Thread Curt
On 2016-08-07, p...@gatech.edu wrote: > >> On Fri, 5 Aug 2016 at 20:00, Lisi Reisz wrote: > >>> Perhaps he wants to stop his children/grandchildren/house guests surfing > the >>> web at 3:00 am. > >> Spot on, Lisi! > > Hello, > If the computer is not supposed to be connected at all, then maybe: >

Re: Limiting internet access by time

2016-08-07 Thread Mark Fletcher
On Mon, 8 Aug 2016 at 03:15, Brian wrote: > On Sun 07 Aug 2016 at 03:32:00 +, Mark Fletcher wrote: > > > In the end I got what I needed by using Lars' pointer of the iptables > > extensions. I copied the iptables systemd service unit from my LFS box to > > the machine in question, and then cr

Re: Limiting internet access by time

2016-08-07 Thread pv29
Le 5 août 2016 16:23, "Mark Fletcher" a écrit : > On Fri, 5 Aug 2016 at 20:00, Lisi Reisz wrote: >> Perhaps he wants to stop his children/grandchildren/house guests surfing the >> web at 3:00 am. > Spot on, Lisi! Hello, If the computer is not supposed to be connected at all, then maybe: sudo

Re: Limiting internet access by time

2016-08-07 Thread Brian
On Sun 07 Aug 2016 at 03:32:00 +, Mark Fletcher wrote: > In the end I got what I needed by using Lars' pointer of the iptables > extensions. I copied the iptables systemd service unit from my LFS box to > the machine in question, and then created a script in /etc/systemd/scripts > that first s

Re: Limiting internet access by time

2016-08-06 Thread Mark Fletcher
On Sun, Aug 7, 2016 at 9:57 AM Dan Ritter wrote: > On Sat, Aug 06, 2016 at 04:56:06AM +, Mark Fletcher wrote: > > On Sat, Aug 6, 2016 at 2:48 AM Dan Ritter wrote: > > Got it. You can change that by removing NAT from the AP. For > instance, plug your switch into a LAN port instead of the WAN

Re: Limiting internet access by time

2016-08-06 Thread Dan Ritter
On Sat, Aug 06, 2016 at 04:56:06AM +, Mark Fletcher wrote: > On Sat, Aug 6, 2016 at 2:48 AM Dan Ritter wrote: > > > On Fri, Aug 05, 2016 at 03:49:28PM +, Mark Fletcher wrote: > > > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > > > > I didn't mention earlier, and I'm not sure if it i

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Sat, Aug 6, 2016 at 3:43 AM Brian wrote: > On Fri 05 Aug 2016 at 15:49:28 +, Mark Fletcher wrote: > > > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > > > Sticking with the idea of using a systemd service file, the script it > > > runs would check the time and alter the routing table

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Sat, Aug 6, 2016 at 2:48 AM Dan Ritter wrote: > On Fri, Aug 05, 2016 at 03:49:28PM +, Mark Fletcher wrote: > > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > > I didn't mention earlier, and I'm not sure if it is relevant, but the > > computer connects via WiFi to my access point, whic

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 20:02:58 +0100, Brian wrote: > On Fri 05 Aug 2016 at 13:48:54 -0400, Dan Ritter wrote: > > > I have a new suggestion, based on this. > > > > Do all the filtering on your LFS box. > > > > Match your kid's machine by MAC address. > > > > Write two tiny scripts: > > > > #!/

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 13:48:54 -0400, Dan Ritter wrote: > On Fri, Aug 05, 2016 at 03:49:28PM +, Mark Fletcher wrote: > > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > > I didn't mention earlier, and I'm not sure if it is relevant, but the > > computer connects via WiFi to my access poin

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 15:49:28 +, Mark Fletcher wrote: > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > Sticking with the idea of using a systemd service file, the script it > > runs would check the time and alter the routing table when necessary. > > Neither cron nor iptables need come

Re: Limiting internet access by time

2016-08-05 Thread Dan Ritter
On Fri, Aug 05, 2016 at 03:49:28PM +, Mark Fletcher wrote: > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > I didn't mention earlier, and I'm not sure if it is relevant, but the > computer connects via WiFi to my access point, which is also my network's > internet gateway -- with an LFS box

Re: Limiting internet access by time

2016-08-05 Thread David Wright
On Fri 05 Aug 2016 at 15:03:47 (+0100), Brian wrote: > On Fri 05 Aug 2016 at 12:00:28 +0100, Lisi Reisz wrote: > > > On Friday 05 August 2016 11:40:28 Brian wrote: > > > > > > How essential is this? cron could > > > > > > ip route add default via > > > > > > at specific times between 9pm and 9a

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > On Fri 05 Aug 2016 at 12:00:28 +0100, Lisi Reisz wrote: > > > On Friday 05 August 2016 11:40:28 Brian wrote: > > Let us look at this from a different angle. If the machine is given a > fixed address it negates the need for dhcp checking, If, addition

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Fri, Aug 5, 2016 at 4:26 PM Lars Noodén wrote: > > iptables has some match extensions that will work with UTC time, > specifically the extensions --timestart and --timestop Using those you > should be able to make rules that operate all the time but block traffic > during the specified hours.

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Fri, 5 Aug 2016 at 20:00, Lisi Reisz wrote: > On Friday 05 August 2016 11:40:28 Brian wrote: > > On Fri 05 Aug 2016 at 00:02:40 +, Mark Fletcher wrote: > > > On a stretch box I have, I want to allow access to the Internet between > > > the hours of 9am and 9pm and block it between 9pm and

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 12:00:28 +0100, Lisi Reisz wrote: > On Friday 05 August 2016 11:40:28 Brian wrote: > > > > How essential is this? cron could > > > > ip route add default via > > > > at specific times between 9pm and 9am and then remove the default route. > > If the machine isn't up all th

Re: Limiting internet access by time

2016-08-05 Thread Lisi Reisz
On Friday 05 August 2016 11:40:28 Brian wrote: > On Fri 05 Aug 2016 at 00:02:40 +, Mark Fletcher wrote: > > On a stretch box I have, I want to allow access to the Internet between > > the hours of 9am and 9pm and block it between 9pm and 9am. Ideally allow > > local network access throughout bu

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 00:02:40 +, Mark Fletcher wrote: > On a stretch box I have, I want to allow access to the Internet between the > hours of 9am and 9pm and block it between 9pm and 9am. Ideally allow local > network access throughout but block Internet access between 9pm and 9am, > but I c

Re: Limiting internet access by time

2016-08-05 Thread Lars Noodén
On 08/05/2016 03:02 AM, Mark Fletcher wrote: > On a stretch box I have, I want to allow access to the Internet between the > hours of 9am and 9pm and block it between 9pm and 9am. Ideally allow local > network access throughout but block Internet access between 9pm and 9am, > but I can accept total

Limiting internet access by time

2016-08-04 Thread Mark Fletcher
On a stretch box I have, I want to allow access to the Internet between the hours of 9am and 9pm and block it between 9pm and 9am. Ideally allow local network access throughout but block Internet access between 9pm and 9am, but I can accept total network blockage in the off times if necessary. The