Iptables time time matching rule

Inspired by FortiGate these two days, try the time control rules of iptables, organized as follows:

1. Match a fixed time period every day

iptables -I FORWARD -s 172.17.1.132 -d 192.168.1.119 -m time --timestart 09:40 --timestop 09:59 -j DROP

2. Match by fixed time period of week

iptables -I FORWARD -s 172.17.1.132 -d 192.168.1.119 -m time --timestart 09:40 --timestop 09:59 --weekdays Wed,Thu -j DROP

3, according to the fixed date match, note here is more special, you can see the following time is 17 o 'clock is not 9 o' clock, because of the time zone reasons, to be 8 hours difference.

iptables -I FORWARD -s 172.17.1.132 -d 192.168.1.119 -m time --datestart 2014-3-19T17:40:08 --datestop 2014-3-19T17:59:50 -j DROP

Enclosed Help Notes:

time match options: --datestart time Start and stop time, to be given in ISO 8601 --datestop time (YYYY[-MM[-DD[Thh[:mm[:ss]]]]]) --timestart time Start and stop daytime (hh:mm[:ss]) --timestop time (between 00:00:00 and 23:59:59)[!] --monthdays value List of days on which to match, separated by comma (Possible days: 1 to 31; defaults to all)[!] --weekdays value List of weekdays on which to match, sep. by comma (Possible days: Mon,Tue,Wed,Thu,Fri,Sat,Sun or 1 to 7 Defaults to all weekdays.) --localtz/--utc Time is interpreted as UTC/local time