Hello all, I am using Shorewall shorewall-1.4.6a-1 on RH 9.0. I have added static nat entries as outlined in ''Shorewall and Aliased Interfaces'' I now wish to use MRTG to monitor the bandwidth on all IP''s, including the aliases that were created by Shorewall (ADD_IP_ALIASES=Yes). Since 2.4 kernels do not record TX/RX metrics, I was pointed in the direction to use IPTABLES to gather incoming/outgoing bytes which then could be passed to MRTG using a Perl script Here is my relevant Shorewall config: /etc/shorewall/nat: 216.194.X.X eth0:0 192.168.3.5 no no /etc/shorewall/rules: ACCEPT net loc:192.168.3.5 tcp 22 ACCEPT net loc:192.168.3.5 tcp 443 The Perl Script checks the relevant chains in iptables for incoming and outcoming bytes transmitted. These values are then passed back to MRTG for stats. here is the relevant snipit: ` $iptables -L $rule_in --line-numbers -nvx` `$iptables -L $rule_out --line-numbers -nvx` where $rule_in and $rule_out are the specific chains for the alias My question is, what Shorewall chains should I be using for $rule_in & $rule_out so that I can use MRTG to monitor eth0:0? Is this even possible? Hope this made sense and any feedback is appreciated. Cheers, Paul Seniuk Freestyle Networks