[Shorewall-users] static NAT

Tom Eastep
Sat, 09 Aug 2003 18:16:11 -0000

On Sat, 9 Aug 2003, Tom Eastep wrote:

>
> Shorewall won''t do that for you -- but using extension scripts you
can
> do pretty much anything you like to modify the Shorewall-generated
> ruleset.
>

The version of Shorewall in the /Shorewall CVS project contains a rather
crude IP accounting facility. You define the categories of traffic that
you want counted (packets and bytes) in /etc/shorewall/accounting and
the you can display the counters and rules using "shorewall show
accounting".

Install today''s snapshot then overlay /usr/share/shorewall/firewall
with
the firewall file from CVS and move the "accounting" file from CVS to
/etc/shorewall/accounting. Basic instructions for setting up the file
are contained therein.