Re: Place for ipt_ACCOUNT/ipt_NETFLOW

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 02/03/11 02:50, Srinivasa T N wrote:
Is it possible for me to place rules related to accounting after filter
table in the INPUT chain so that the accounting takes place only on the
packets I am accepting in my box?

I hope I'm understanding you correctly.

It sounds like you are wanting to do your accounting after you filter out most of the chaff / noise / IBR that you don't want. Correct?

If this is the case, why don't you have your filtering rules DROP / REJECT / otherwise discard the packets you don't want and then have a follow up rule that ACCEPTS the packet and do your accounting there?

At least if I understand you correctly, filtering packets before they hit your accounting rule should do what you are wanting.



Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux