I can create the accounting now
Thank :)
Tom Eastep <teastep@shorewall.net> 說：
Wilson Kwok wrote:> Hello,
>
> I want set the accounting function for web traffic, when I use shorewall
> show web it can''t show anything.
>
> accounting file:
>
> GROUP
> web:COUNT - eth1 eth0 tcp 80 80
> web:COUNT - eth0 eth1 tcp 80 80
Your rules require that both the source and destination port be 80 which never
matches. Web servers listen on TCP port 80 but web browsers use a temporary port
which you cannot predict. So your rules should have DEST PORT = 80 for traffic
*to* the server (from the browser) and they should have SOURCE PORT = 80 for
traffic *from* the server (to the browser).
If you have both servers and clients routed through both eth0 and eth1 then you
would need four rules:
web:COUNT - eth1 eth0 tcp 80
web:COUNT - eth0 eth1 tcp - 80
web:COUNT - eth0 eth1 tcp 80
web:COUNT - eth1 eth0 tcp - 80
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
_______________________________________
YM - 離線訊息
就算你沒有上網，你的朋友仍可以留下訊息給你，當你上網時就能立即看到，任何說話都冇走失。
http://messenger.yahoo.com.hk
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642