From: Eric Leblond <eric@regit.org>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] Performanace fo the Iptables Server
Date: Wed, 27 Aug 2003 17:57:23 +0000 [thread overview]
Message-ID: <marc-lartc-106200707420538@msgid-missing> (raw)
In-Reply-To: <marc-lartc-106196327503921@msgid-missing>
[-- Attachment #1: Type: text/plain, Size: 749 bytes --]
Le mer 27/08/2003 à 19:41, Stef Coene a écrit :
> On Wednesday 27 August 2003 19:31, hare ram wrote:
> > Hi Stef
> >
> If you really want it very detailed (src/dst - address/port), you indeed have
> to log it to mysql or so.
> You can calulcate the number of updates you have to do mysql and simulate this
> on a test box.
As the mark you can put on the packet is quiet long you can use a mask
system : [IP user][proto].
Next the script has only to split the information contained in the mark.
That's add a multiplicative factor to the number of rules but that's
all. So no need to use mysql.
By the way you will need use connmark to track non linear protocol like
ftp.
BR,
--
Eric Leblond
Nufw : http://www.nufw.org
[-- Attachment #2: Ceci est une partie de message numériquement signée --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
next prev parent reply other threads:[~2003-08-27 17:57 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-08-27 5:58 [LARTC] Performanace fo the Iptables Server hare ram
2003-08-27 15:30 ` Stef Coene
2003-08-27 17:15 ` hare ram
2003-08-27 17:17 ` Stef Coene
2003-08-27 17:41 ` Stef Coene
2003-08-27 17:43 ` hare ram
2003-08-27 17:51 ` hare ram
2003-08-27 17:57 ` Eric Leblond [this message]
2003-08-27 18:09 ` Stef Coene
2003-08-28 3:37 ` Raj Mathur
2003-09-02 10:20 ` hare ram
[not found] <019f01c36c5e$9f7868e0$c2bf09ca@Housecall>
2003-08-27 15:30 ` Stef Coene
[not found] ` <200308271730.07228.stef.coene@docum.org>
2003-08-27 17:03 ` hare ram
[not found] ` <011601c36cbd$185a5da0$c2bf09ca@Housecall>
2003-08-27 17:17 ` Stef Coene
[not found] ` <200308271917.00121.stef.coene@docum.org>
2003-08-27 17:31 ` hare ram
[not found] ` <015d01c36cc1$11fbabe0$c2bf09ca@Housecall>
2003-08-27 17:41 ` Stef Coene
[not found] ` <200308271941.53445.stef.coene@docum.org>
2003-08-27 17:50 ` hare ram
[not found] ` <026101c36cc3$b6b76280$c2bf09ca@Housecall>
2003-08-27 18:09 ` Stef Coene
2003-08-28 3:25 ` Raj Mathur
2003-09-02 10:08 ` hare ram
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-106200707420538@msgid-missing \
--to=eric@regit.org \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.