Provide mechanism to activate filewall rules for devices of users who are over their time limit

[marcus67]

In case LittleBrother is setup to monitor extra devices it would come in handy to setup firewall rules to deactivate the network connection of all those devices to the outside world. This would represent at least some impact of being "over time limit" since LittleBrother cannot directly influence the extra devices.

The simplest approach would be using iptables. When a user is over budged all devices that are linked to him would be blocked by issuing commands such as

iptables -I FORWARD -s SOME.MONITORED.DEVICE.IP  -j DROP

The state could be verified using

iptables -n -L  FORWARD --line-numbers

When the user is permitted to use the computer again the rule identified in the list above could be deleted using

iptables -D FORWARD RULE_NUMBER

[marcus67]

Closed in eaae776