Vincent Chen wrote: > Hi, all Hi Vincent, > > I have been looking around for accounting solution by stateful session. > FreeBSD's ipfilter have done a pretty good job. Can netfilter do that? Of course, search for 'ctstat' which is a conntrack accounting tool. IIRC, you may or may not need a patch for your conntrack, depending on the linux kernel release you have. > > > Thanks, > > Vincent Chen > HTH, Samuel