On Wednesday 13 November 2002 2:08 pm, Eric Leblond wrote: > On Wed, 2002-11-13 at 14:24, Raymond Leach wrote: > > Hi > > > > Where do I do iptables accounting? > > > > For example: If I have users on a private LAN surfing via a proxy on the > > firewall and I have web servers in a DMZ also being routed via the > > firewall, where do I put my accounting rules? In the FORWARD chain, or > > the INPUT chain, or both? > > Not INPUT if you don't have a web server on your firewall. > FORWARD is a good place. But he does have a web server on his firewall - he is running a proxy, which is both a server and a client in a single application. Antony. -- Most people have more than the average number of legs.
