I would like to be able to restrict access to WEB sites at certain times of day. My kids need to do their homework before they 'play' so I want to allow access to ONLY reference sites (encyclopedias - online translators - dictionaries - etc) ALL day and then any site (not flagged by URL filtering) between 19h and bedtime 21h.
I can do some of it with the rules 'Between' settings but not all.
Any ideas?

Hi,

with a set of rules from "kids PC" to "referenced site" allow
and
from "Kids PC" to "Any" when time between 18:00 - 21:00
as you describe it should be ok.
Which part you need and you can't do ?

Depending of the numbers of authorized sites, and even of some IP of this sites, it can be easier to set up and use a proxy.
Safe@ are not really good at that.

what sort of object do you mean when you say "referenced site"? Do I have to do a rule for every site I let them access or can I create some sort of list and use that?
Rgs

Hi,

you need a rule by allowed site. And the rule will use the ip of the target, so if the same ip hosts an useful site for your kids and a game site with differents fqdn, but same ip (shared hosting offer like most big hosting companies) you can give access to one and prevent access to the second.

Safe@ is really good to allow/block protocols by ip, and with the web filtering by category to block some site. But for a real site by site, with time of the day or quantity of time by day a real proxy is better. Sage@ are first firewalls with a bit of UTM :)

Right after a lot of playing and some support calls I have a 'sort of' solution.
The first thinsg to know is that if a connection MATCHES a security/rule it will NOT get checked against the security/WEB rule - this is very important to know.
So I created a rule to ALLOW my kids machines to ANY between 20h and 21:30h. This lets them surf WITH the WEB filtering service being applied.
Next I created a security/WEB filter for each site they are allowed to visit with a BLOCK - ANY - * as the last one.
SO the logic goes like this...
- During normal hours no rule so WEB rules checked.
- During allowed time security/rule active so free riegn within WEB-filtering
Voila...
The problem is that this cannot be changed automatically during say weekends - so someone has to active/de-active them by hand.
Still 70% is better than none :-)
Regards

It can be changed automatically. Just configure a cronjob on your admin pc to run every weekend. Let the cronjob run a SSH script that will login into your Safe@ and change the webrules according to your needs.