From mboxrd@z Thu Jan 1 00:00:00 1970 From: lists+netfilter@roth.lu Subject: Re: viewing rules and traffic while inserting/removing rules Date: Thu, 08 May 2008 19:17:54 +0200 Message-ID: <482335C2.2070004@roth.lu> References: <4821E655.4010504@roth.lu> <090801c8b07c$fa084b60$5000040a@skathlaptop> <48232DD7.3070603@riverviewtech.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <48232DD7.3070603@riverviewtech.net> Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: Mail List - Netfilter Grant Taylor wrote: > On 05/07/08 15:01, Steven Kath wrote: >> Have you considered using netfilter's ip sets for this? Sounds like >> it might be perfect for your needs. > > With out knowing how or what the OP is accounting we don't know if > s/he is looking at each individual network that is being filtered or > if it is clients behind the system. If it is networks that are being > filtered I would think that the single ipset rule would make it much > harder, if not impossible, to keep accounting data for a single rule. I do not need to keep individual accounting data for each network that is blocked.