Re: [Shorewall-users] Accounting Proxyarp users !!?

[Jerry V. <jv...@sh...>]

>Hi Folks,
>
>Can i account proxyarped pc=B4s ??
>
>Like know how much web traffic passthru a specific person ip using
shorewall ?
>
>So i can know how much bandwidth that specific IP EAT ?
>
>Thanks alot

Sorry, I have no "hands on" experence with the accounting stuff.
http://www.shorewall.net/Accounting.html shows the basic layout.
Are you talking all traffic or just http?

Something like this for all traffic:

client1:COUNT       -       <ipofclient>    0.0.0.0/0            all
client1:COUNT       -       0.0.0.0/0         <ipofclient>       all
DONE            -       <ipofclient>    0.0.0.0/0           all
DONE            -       0.0.0.0/0        <ipofclient>       all
DONE    client1

rinse, lather, repeat, changing client1 and ipofclient for the next c=
lient.
Not sure how well this would scale....

"shorewall show client1" should show the traffic passed.

This is how I tested this:
accounting:
web:COUNT       -       10.3.0.12       0.0.0.0/0               all
web:COUNT       -       0.0.0.0/0       10.3.0.12               all
DONE    web
DONE            -       eth0    eth2            all
DONE            -       eth2    eth0            all

[root@shore jerico //sbin/shorewall show web
Shorewall-2.4.2 Chain web at shore.wp.shawcable.net - Wed Jul 27 14:1=
4:18
CDT 20
05

Counters reset Wed Jul 27 14:13:01 CDT 2005

Chain web (2 references)
 pkts bytes target     prot opt in     out     source
destination

   59  4891            all  --  *      *       10.3.0.12
0.0.0.0/0

   53  8662            all  --  *      *       0.0.0.0/0
10.3.0.12

  112 13553 RETURN     all  --  *      *       0.0.0.0/0
0.0.0.0/0

*should* work in a proxyarp layout also, I just can't test it.

Jerry