Matt Groener wrote:

> You'd still need to program the functionality for time-based rule
> insertion/deletion (not trivial), but at least to capture cron
> information across reboots should be easy.

It is trivial in ipfw -- just put the block rule in a set, and
enable/disable the set at appropriate times.  Set operations
are atomic, including switching sets.