Matt Groener wrote:
> You'd still need to program the functionality for time-based rule
> insertion/deletion (not trivial), but at least to capture cron
> information across reboots should be easy.
It is trivial in ipfw -- just put the block rule in a set, and
enable/disable the set at appropriate times. Set operations
are atomic, including switching sets.