accounting

accounting

[Klaus Boehm]

Hi,

I want use the iptables for accounting.
1. How looks the iptable rules.
2. In which file under the proc filesystem I could read the counter values.

Thanks for any hints.


Klaus

-- 


ewt gmbh
data management group
tel: ++49 821 3106 319
fax: ++49 821 3106 399
url: www.ewt.de

Re: accounting

[Ralf Spenneberg]

Hi,

Am Don, 2003-10-09 um 15.44 schrieb Klaus Boehm:
> I want use the iptables for accounting.
> 1. How looks the iptable rules.
> 2. In which file under the proc filesystem I could read the counter values.
There are probably better applications to do accounting, but if you want
to do that:
1. This rule will cover all HTTP-traffic 
iptables -A FORWARD -p tcp --port 80
2. You can read the counters using 
iptables -vnL
3. You can reset the counters using
iptables -Z

Cheers,

Ralf
-- 
Ralf Spenneberg
RHCE, RHCX

Book: Intrusion Detection für Linux Server   http://www.spenneberg.com
IPsec-Howto				     http://www.ipsec-howto.org
Honeynet Project Mirror:                     http://honeynet.spenneberg.org

accounting

[Brent Clark]

Hi

What would be the correct method for like accounting programs for like a 'pay as you go' internet.

Basically keep track users bandwidth usage, time etc.

For the guys in the ISP market, what or how would you guys go about this, or am I doomed to use a commercial
product like Checkpoint or something.

Im hoping iptables has / can do something.

Regards
Brent Clark

P.s. Wonder if monowall does some type of accounting.

RE: accounting

[Rob Sterenborg]

> What would be the correct method for like accounting programs
> for like a 'pay as you go' internet.
>
> Basically keep track users bandwidth usage, time etc.
>
> For the guys in the ISP market, what or how would you guys go
> about this, or am I doomed to use a commercial
> product like Checkpoint or something.
>
> Im hoping iptables has / can do something.

I'm not in the ISP market, but about a year ago I installed IP
accounting software on a server to see how it works. I looked and found
ipac-ng and iag in an old download directory but I can't remember which
one I got working.. The latest versions of both packages are not recent
(2004, 2005) but at the time I got one of them working.

Maybe you can do something with the below :
ipac-ng: http://sourceforge.net/project/showfiles.php?group_id=28513
ipac-ng (howto): http://martybugs.net/linux/ipac.cgi
iag: http://dev.lashout.net/iag/ (Needs Sablotron)

Really, I don't remember which one worked and what the results looked
like so I hope this is of any use.


Grts,
Rob

RE: Incomming packets

[Eugene Joubert]

[-- Attachment #1: Type: text/plain, Size: 764 bytes --]

It looks like a DNS problem. I am not to sure if iptables likes host names
it cannot resolve to an IP. Maybe try an IP or put the test.host in your
/etc/hosts directory.

Hope this helps

-----Original Message-----
From: serguey.forcade@emelytours.com.do
[mailto:serguey.forcade@emelytours.com.do] 
Sent: 11 03 2003 04:22 AM
To: netfilter@lists.netfilter.org
Subject: Incomming packets


Hello:

    I'm trying to set a rule in my iptables configuration to accept
incomming connections from an specific host, (ie. iptables -A input -i eth0
-p tcp --dport 21 -s test.host -j ACCEPT ) and I keep getting the error:

iptables v1.2.6a: host/network `test.host' not found
Try `iptables -h' or 'iptables --help' for more information.

Does anyone know about it?

Thanks

[-- Attachment #2: Type: text/html, Size: 1495 bytes --]

Accounting

[Andrew Barbara]

Hi,
Does iptables keep a file that keeps track of accounting information?  I 
know ipchains did.
Thanks
Andrew