Re: Limiting internet access by time

2016-08-10 Thread Stefan Monnier
>> What kind of AP would consume 20W? Mine consumes around 5W and that includes >> a 2TB disk attached to it (and spinning). > An Asus RT-N56U needs 30W max. A Linksys EA6900 needs 42W. I'm not concerned about max consumption. I'm talking about 24/7 consumption (i.e. the impact on the monthly kW

Re: Limiting internet access by time

2016-08-10 Thread Dan Ritter
On Wed, Aug 10, 2016 at 10:51:03AM -0400, Stefan Monnier wrote: > > a maximum consumption of about 3W, and has no configuration at > [...] > > A typical AP needs 10-20W, > > What kind of AP would consume 20W? Mine consumes around 5W and that includes > a 2TB disk attached to it (and spinning). A

Re: Limiting internet access by time

2016-08-10 Thread Stefan Monnier
> a maximum consumption of about 3W, and has no configuration at [...] > A typical AP needs 10-20W, What kind of AP would consume 20W? Mine consumes around 5W and that includes a 2TB disk attached to it (and spinning). > and has an expected lifetime of 1-4 years. Where do you get those numbers?

Re: Limiting internet access by time

2016-08-10 Thread Dan Ritter
On Tue, Aug 09, 2016 at 03:14:27PM -0400, Stefan Monnier wrote: > > Nope. Buy a $20 5-8 port ethernet switch. Very reliable. That's > > in the diagram above as "switch". > > But it also means one more box. If you had one box before, that doubles > the number of boxes, and might also double the 24

Re: Limiting internet access by time

2016-08-09 Thread Stefan Monnier
> Nope. Buy a $20 5-8 port ethernet switch. Very reliable. That's > in the diagram above as "switch". But it also means one more box. If you had one box before, that doubles the number of boxes, and might also double the 24/7 power consumption. Stefan

Re: Limiting internet access by time

2016-08-09 Thread Dan Ritter
On Sun, Aug 07, 2016 at 03:32:00AM +, Mark Fletcher wrote: > On Sun, Aug 7, 2016 at 9:57 AM Dan Ritter wrote: > > > On Sat, Aug 06, 2016 at 04:56:06AM +, Mark Fletcher wrote: > > > On Sat, Aug 6, 2016 at 2:48 AM Dan Ritter wrote: > > > > Got it. You can change that by removing NAT from t

Re: Limiting internet access by time

2016-08-08 Thread Karol Augustin
On 2016-08-08 8:30, pasc...@sdf.org wrote: > On Mon, 8 Aug 2016, Curt wrote: >> >> I haven't been following the thread (discussion beyond my technical >> reach) but couldn't the little man boot up a live cd or usb drive and >> surf his little heart out? Someone talked about targeting the MAC >> ad

Re: Limiting internet access by time

2016-08-08 Thread pascalv
On Mon, 8 Aug 2016, Curt wrote: On 2016-08-07, p...@gatech.edu wrote: On Fri, 5 Aug 2016 at 20:00, Lisi Reisz wrote: Perhaps he wants to stop his children/grandchildren/house guests surfing the web at 3:00 am. Spot on, Lisi! Hello, If the computer is not supposed to be connected a

Re: Limiting internet access by time

2016-08-07 Thread Curt
On 2016-08-07, p...@gatech.edu wrote: > >> On Fri, 5 Aug 2016 at 20:00, Lisi Reisz wrote: > >>> Perhaps he wants to stop his children/grandchildren/house guests surfing > the >>> web at 3:00 am. > >> Spot on, Lisi! > > Hello, > If the computer is not supposed to be connected at all, then maybe: >

Re: Limiting internet access by time

2016-08-07 Thread Mark Fletcher
On Mon, 8 Aug 2016 at 03:15, Brian wrote: > On Sun 07 Aug 2016 at 03:32:00 +, Mark Fletcher wrote: > > > In the end I got what I needed by using Lars' pointer of the iptables > > extensions. I copied the iptables systemd service unit from my LFS box to > > the machine in question, and then cr

Re: Limiting internet access by time

2016-08-07 Thread pv29
Le 5 août 2016 16:23, "Mark Fletcher" a écrit : > On Fri, 5 Aug 2016 at 20:00, Lisi Reisz wrote: >> Perhaps he wants to stop his children/grandchildren/house guests surfing the >> web at 3:00 am. > Spot on, Lisi! Hello, If the computer is not supposed to be connected at all, then maybe: sudo

Re: Limiting internet access by time

2016-08-07 Thread Brian
On Sun 07 Aug 2016 at 03:32:00 +, Mark Fletcher wrote: > In the end I got what I needed by using Lars' pointer of the iptables > extensions. I copied the iptables systemd service unit from my LFS box to > the machine in question, and then created a script in /etc/systemd/scripts > that first s

Re: Limiting internet access by time

2016-08-06 Thread Mark Fletcher
On Sun, Aug 7, 2016 at 9:57 AM Dan Ritter wrote: > On Sat, Aug 06, 2016 at 04:56:06AM +, Mark Fletcher wrote: > > On Sat, Aug 6, 2016 at 2:48 AM Dan Ritter wrote: > > Got it. You can change that by removing NAT from the AP. For > instance, plug your switch into a LAN port instead of the WAN

Re: Limiting internet access by time

2016-08-06 Thread Dan Ritter
On Sat, Aug 06, 2016 at 04:56:06AM +, Mark Fletcher wrote: > On Sat, Aug 6, 2016 at 2:48 AM Dan Ritter wrote: > > > On Fri, Aug 05, 2016 at 03:49:28PM +, Mark Fletcher wrote: > > > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > > > > I didn't mention earlier, and I'm not sure if it i

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Sat, Aug 6, 2016 at 3:43 AM Brian wrote: > On Fri 05 Aug 2016 at 15:49:28 +, Mark Fletcher wrote: > > > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > > > Sticking with the idea of using a systemd service file, the script it > > > runs would check the time and alter the routing table

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Sat, Aug 6, 2016 at 2:48 AM Dan Ritter wrote: > On Fri, Aug 05, 2016 at 03:49:28PM +, Mark Fletcher wrote: > > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > > I didn't mention earlier, and I'm not sure if it is relevant, but the > > computer connects via WiFi to my access point, whic

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 20:02:58 +0100, Brian wrote: > On Fri 05 Aug 2016 at 13:48:54 -0400, Dan Ritter wrote: > > > I have a new suggestion, based on this. > > > > Do all the filtering on your LFS box. > > > > Match your kid's machine by MAC address. > > > > Write two tiny scripts: > > > > #!/

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 13:48:54 -0400, Dan Ritter wrote: > On Fri, Aug 05, 2016 at 03:49:28PM +, Mark Fletcher wrote: > > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > > I didn't mention earlier, and I'm not sure if it is relevant, but the > > computer connects via WiFi to my access poin

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 15:49:28 +, Mark Fletcher wrote: > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > > Sticking with the idea of using a systemd service file, the script it > > runs would check the time and alter the routing table when necessary. > > Neither cron nor iptables need come

Re: Limiting internet access by time

2016-08-05 Thread Dan Ritter
On Fri, Aug 05, 2016 at 03:49:28PM +, Mark Fletcher wrote: > On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > > I didn't mention earlier, and I'm not sure if it is relevant, but the > computer connects via WiFi to my access point, which is also my network's > internet gateway -- with an LFS box

Re: Limiting internet access by time

2016-08-05 Thread David Wright
On Fri 05 Aug 2016 at 15:03:47 (+0100), Brian wrote: > On Fri 05 Aug 2016 at 12:00:28 +0100, Lisi Reisz wrote: > > > On Friday 05 August 2016 11:40:28 Brian wrote: > > > > > > How essential is this? cron could > > > > > > ip route add default via > > > > > > at specific times between 9pm and 9a

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Fri, Aug 5, 2016 at 11:04 PM Brian wrote: > On Fri 05 Aug 2016 at 12:00:28 +0100, Lisi Reisz wrote: > > > On Friday 05 August 2016 11:40:28 Brian wrote: > > Let us look at this from a different angle. If the machine is given a > fixed address it negates the need for dhcp checking, If, addition

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Fri, Aug 5, 2016 at 4:26 PM Lars Noodén wrote: > > iptables has some match extensions that will work with UTC time, > specifically the extensions --timestart and --timestop Using those you > should be able to make rules that operate all the time but block traffic > during the specified hours.

Re: Limiting internet access by time

2016-08-05 Thread Mark Fletcher
On Fri, 5 Aug 2016 at 20:00, Lisi Reisz wrote: > On Friday 05 August 2016 11:40:28 Brian wrote: > > On Fri 05 Aug 2016 at 00:02:40 +, Mark Fletcher wrote: > > > On a stretch box I have, I want to allow access to the Internet between > > > the hours of 9am and 9pm and block it between 9pm and

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 12:00:28 +0100, Lisi Reisz wrote: > On Friday 05 August 2016 11:40:28 Brian wrote: > > > > How essential is this? cron could > > > > ip route add default via > > > > at specific times between 9pm and 9am and then remove the default route. > > If the machine isn't up all th

Re: Limiting internet access by time

2016-08-05 Thread Lisi Reisz
On Friday 05 August 2016 11:40:28 Brian wrote: > On Fri 05 Aug 2016 at 00:02:40 +, Mark Fletcher wrote: > > On a stretch box I have, I want to allow access to the Internet between > > the hours of 9am and 9pm and block it between 9pm and 9am. Ideally allow > > local network access throughout bu

Re: Limiting internet access by time

2016-08-05 Thread Brian
On Fri 05 Aug 2016 at 00:02:40 +, Mark Fletcher wrote: > On a stretch box I have, I want to allow access to the Internet between the > hours of 9am and 9pm and block it between 9pm and 9am. Ideally allow local > network access throughout but block Internet access between 9pm and 9am, > but I c

Re: Limiting internet access by time

2016-08-05 Thread Lars Noodén
On 08/05/2016 03:02 AM, Mark Fletcher wrote: > On a stretch box I have, I want to allow access to the Internet between the > hours of 9am and 9pm and block it between 9pm and 9am. Ideally allow local > network access throughout but block Internet access between 9pm and 9am, > but I can accept total