--=-1Dkh/MbskVnG3OC2GRLE Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi Where do I do iptables accounting? For example: If I have users on a private LAN surfing via a proxy on the firewall and I have web servers in a DMZ also being routed via the firewall, where do I put my accounting rules? In the FORWARD chain, or the INPUT chain, or both? Ray --=20 --=-1Dkh/MbskVnG3OC2GRLE Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQA90lJ/h1fuR/Bv+ygRAojeAJ4tGCyFInNouIgRtL0qG1qHgDtoDQCgoOMf HHFOMj4e2p0ANiv3PiJEE6g= =Ezkz -----END PGP SIGNATURE----- --=-1Dkh/MbskVnG3OC2GRLE--