Cloud

@Cloud I'm not quite sure, beyond me changing it some time back because I felt my old one was silly. Not my intent to duplicate usernames: the UI just let me change it.

Either a smear/troll or an accidental self-dox. I propose the question be dis-associated with the user account so it's posted by "Anonymous", so it can't be tied to a real person via reviewing edits and comments.

*Bump.

Howdy. Does time permit to resume this discussion? Thanks.

The "block all other users" piece doesn't seem to function.

For some reason, it doesn't work on CentOS 7.6

I managed to get this working flawlessly on Ubuntu 14.04 and 16.04.

Thank you.

I'll try this out.

via ` iptables -D INPUT -m set ! --match-set whitelist src -j DROP` ?

To confirm: go with the existing solution you provided, and use a cronjob to cleanup after?

OK.

Ideally, after the timeout occurs, all rules added by my script are purged.

Correct.

thank you for taking the time to help with this, by the way.

Hi there.

and to ensure non-whitelisted IPs are kicked (even if already connected) and cannot establish new connections during the 3600 second duration/window.

The general goal is to never limit/interfere with whitelisted IPs.

i.e. if an IP is not in the whitelist, and the script is run, will that IP stay connected, or get kicked immediately?

Does that apply to whitelisted and non-whitelisted connections?

Also, does this change kick out anyone not in the whitelist immediately, or does it allow them to continue their work? I'd like to instantly boot/kick anything not in the whitelist when running the script.

Thank you for the help.

I edited the question to address this (hopefully). Does the edited example match your suggestion?

That much I realize, but I don't see which piece of the example bans/blocks incoming IP connectivity outside of the whitelisted range (I edited the question to note this). Additionally, with the example I provided, it works, but after the timeout elapses, all incoming connections are blocked until I power cycle the machine. I was hoping I could block all incoming IPs outside of the whitelist. My intent is basically to allow a handful of IPs to have temporary, exclusive access to a machine (i.e. via SSH, TELNET, HTTP, etc.) and then guaranantee the change expires/times-out.

Could I also please request a minimal example without persistence/save files? I'm still not certain on how to properly block all other IPs, and avoid the issue I have where, when the timeout elapses, everyone is locked out of the system.

@MplsAmigo Also, ask the admins to purge the edit history for the question, and delete any comments that had your previous user/IRL name in it.

You might consider creating a separate Stackexchange account that doesn't have your real-world identity attached to it, and ask the admins to: 1) Cleanup comments with your name in it. 2) Disassociate this question from your account so that it's posted by "Anon". Nothing wrong with a second account so long as you're not using it to abuse the system.

This will teach the student an important life lesson: how to follow instructions.

Thank you for this.

Thanks!

Well, if nothing else, I learned that Blender isn't a CAD tool today.

*tool

Oh, a latex-like tools

Last I checked, it can do cad/woodworking , AND 3d-printed toys/designs/chassis.

Should I maybe just drop blender and go solely for SolidWorks?

Haha, back to SolidWorks for me.

What (preferably Linux) 3d cad tools would you recommend?

oh.

I was hoping to use one tool (i.e. sketchup) for all use cases, but preferred blender, since it's massive and FOSS.

Are there any decent 3d cad tools for Linux? or is it pretty much maya/autodesk or Sketchup?

What tools would those be?

I don't see how text or ascii art would be helpful for designing custom cabinets with custom-routed bevels.

What kind of draft are you proposing?

I'm mostly interested in printing out woodworking schematics others can use with hand-tools and power tools (no industrial fab), and 3d printing (would have to be sent off to a fab house).

I could use a text editor to code a POVRAY render of everything I need.

I don't follow.

For just the sake of (quality) woodworking and 3d-printing schematics, would I be better off biting the bullet, and buying a windows + autodesk setup?

@Kroltan Good point. For some reason I assumed USA/Canada due to the currency noted. I usually look for a country-specific tag first. Yeah, I'm off the mark on this one.

@KeithThompson Kind of depressing that basic inalienable human rights and essential decency are sometimes treated as a partisan issue.

Run away. Unless you have an offer letter with all conditions lifted and all reference/background checks completed without concerns, the contract is useless to you, but enforceable by your new employer. It's a one-sided deal.