similar to: [PATCH] Support for accounting based on uid/gid

Hello, I want to test Shorewall''s IPsec feature. It requires patched netfilter (and kernel but that''s another story). I didn''t want to replace my distribution''s iptables package with my own compilation so I installed it to another prefix. Now Shoreall uses the iptables command found first in $PATH. I don''t think this is the most elegant way. I

Ok -- I''m wearing the brown bag tonight (I''ve airmailed one to Tuomas as well :-) ). The IPTABLES patch had some problems when IPTABLES was not set in /etc/shorewall/shorewall.conf. Beta 6 fixes those (I hope) and also corrects a rather obscure problem with "shorewall add" when the "mss" option appears in /etc/shorewall/ipsec. -Tom -- Tom Eastep \

.... I need a break. Happy New Year, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key

Hi, I am using shorewall accounting feature to measure voice and data traffic passing through my firewall. Now I want to integrate this to Cacti graphs that I use. However, the command output of "shorewall show accounting" shows the bytes and packets counts in K , M and G How can I get the actual bytes from accounting output ? Thanks.

I have an office setup with shorewall and when there''s bandwidth problems, I''d like to know who''s hogging my bandwidth and how (port). What would be the best approach to have shorewall show me something like: IP | Port | Bytes In | Bytes Out I have 20 PCs connected via DHCP. I looked at the documentation and thought that accounting may be close, but accounting

I should also mention that Accounting rules are not stateful -- each rule only handles traffic in one direction. So for example, if eth0 is your internet interface and you have a web server in your DMZ connected to eth1 then to measure HTTP traffic in both directions requires two rules: DONE eth0 eth1 tcp 80 DONE eth1 eth0 tcp - 80 Associating a counter with a chain allows for aggregation.

What speaks for it and which speaks against it that Firewall and squid run on the same machine? Regards Menki ------------------------------------------------------- All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more

Hi everyone! First of all: Big thanks to Tom for this great work!! Now on to my qestion: I am using Shorewall among other machines on an new server where we need some kind of accounting. The script we would like to use for this is iam (http://intevation.de/iam/). The docs say: Alternatively you can use your own iptables script and only add the ''dump'' option, which should

dear tom, i have question about "shorewall accounting", if i count traffic IN or OUT from spesific Ethx no problem,but how to counting traffic for spesific IP??? thank''s tom best regards, eddy

Hello, I want set the accounting function for web traffic, when I use shorewall show web it can''t show anything. accounting file: GROUP web:COUNT - eth1 eth0 tcp 80 80 web:COUNT - eth0 eth1 tcp 80 80 Thank ! _______________________________________ YM - 離線訊息

Hi Folks, Can i account proxyarped pc´s ?? Like know how much web traffic passthru a specific person ip using shorewall ? So i can know how much bandwidth that specific IP EAT ? Thanks alot Carlos Arnt ------------------------------------------------------- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward

I''ve just put in production a Linux firewall with 4 ethernet interfaces and 3 openvpn tun virtual interfaces. With Shorewall everything work like a charm (only a little hassle with some details, due to bad configuration, not bugs!) Great tool! Tom and other Shorewall developers, you all are great! Bye (and sorry for my bad english) -- Paolo Basenghi - Centro elaborazione dati

I have a quick question regarding accounting rules. This is the contents of my accounting file. *for reference eth1 is my net interface eth0 is my loc interface ezp:COUNT - eth1 129.15.70.46 tcp 80 ezp:COUNT - 129.15.70.46 eth1 tcp - 80 smag:COUNT - eth1 129.15.70.24 tcp 80 smag:COUNT - 129.15.70.24 eth1 tcp - 80

The current CVS version (/Shorewall project) contains a redesigned IP accounting facility. The new facility is: a) Much simpler. :-) b) More flexible. :-) c) Compatible with bw-acct. :-) c) Incompatible with the previous implementation :-( There''s a new Accounting Page available at: http://shorewall.net/AccountingNew.html On top of Snapshot 20030813: a) Move the

Hi, I need a suggestion about how to set up a shorewall configuration so that I can log the traffic size being downloaded through a shorewall dedicated box. I need to log time, source IP, size of the transfer, protocol(s) and ports, destination IP (looking from inside the LAN, I mean :-) Whenever possible, I''d like to resolve the source IP with our existing internal DNS, so that I

Hey Guys, Anybody know of any decent accounting software that runs on centos? Web or App based is fine.. Pref open or free.. Thanks, Wayne

If you downloaded a version of the ''firewall'' script earlier that 1.294, please upgrade to that version; earlier versions have problems - 1.293 has a syntax error for example :-( -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi all, I did try to do this myself as I thought Tuomas had introduced himself and gotten wiki access for other pages ... but my skills with the #acl markup have atrophied and I couldn't make it work. :) I'd like Tuomas to have access so there is a clear commit record of him having down the work, and in the future to collaborate on any adjustments to that page. best regards, - Karsten

Hello! Here is what I have tried to do: 1. I have 400 time series 2. pull one serie at a time from ODBC 3. calculate some descriptives and regressions (about 50 statistic per serie) 4. store the results in the data frame The problem: The time consumed in each loop seems to grow linearly. I used the date() function for timing each loop and time spent in loop seems to grow at the speed of 0.6 *

On Solaris 10 (SPARC & x86), I'm seeing the following error: error: Failed to allocate internet-domain X11 display socket. I tracked this down to this code change between openssh 4.7p1 and 5.0p1: *** openssh-4.7p1/channels.c Mon Jun 25 03:04:47 2007 --- openssh-5.0p1/channels.c Wed Apr 2 15:43:57 2008 *************** *** 1,4 **** ! /* $OpenBSD: channels.c,v 1.270 2007/06/25 08:20:03