On Wed, 2002-11-13 at 14:24, Raymond Leach wrote: > Hi >=20 > Where do I do iptables accounting? >=20 > For example: If I have users on a private LAN surfing via a proxy on the > firewall and I have web servers in a DMZ also being routed via the > firewall, where do I put my accounting rules? In the FORWARD chain, or > the INPUT chain, or both? Not INPUT if you don't have a web server on your firewall. FORWARD is a good place. --=20 =C9ric Leblond courriel : eleblond@init-sys.com
