On Saturday 05 February 2011 09:08 AM, Grant Taylor wrote:
On 02/03/11 23:22, Srinivasa T N wrote:
But adding rules to discard the unwanted traffic and then do an
accounting for the rest of the packets in not a good idea. I may not
even know what type of packets may arrive and writing rules to discard
each of unwanted packets is difficult. So, I prefer to write rules to
accept only the packets that are required and then drop the other
packets. I wanted to do the accounting only for packets that I accept.
Do the accounting on the rules that you write to decide what traffic to
accept.
This will double the number of rules a packet has to traverse (One rule
for accounting and one rule for accept). Is there are other alternative?
Regards,
Seenu.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
