[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Ipchains and traffic accounting question



What is ippp0?  shouldn't that be ppp0 for you?

What part of the chain are the rules in?  If they are "appended" to the
bottom and a rule above matches they'll never get hit.  Try -I input to
"Insert" them into the top.  They should match then.

--mike

On 08 Aug 2001 10:18:37 +0200, M.PITZL@gmx.net wrote:
> Hello all,
> 
> i have a simple question about ipchains and accounting traffic.
> I have 3 pcs at home, one is working as router to the internet and has set
> up ipchains as firewall. Now i want to see, how much traffic pc A
> (192.168.1.2) makes.
> All the pcs are connected via an old 10 Mbit ethernet card through a BNC
> cable.
> I tried to set up rules like:
> ipchains -A input -s 0.0.0.0/0.0.0.0 80:80 -d 192.168.1.2/255.255.255.255 -p
> tcp -i ippp0 -j ACCEPT
> or 
> ipchains -A input -s 0.0.0.0/0.0.0.0 80:80 -d 192.168.1.2/255.255.255.255 -p
> tcp -i eth0 -j ACCEPT
> As far as i understand, ipchains then should recognize the WWW-traffic of pc
> A incoming from the internet. Also, i've made the same rule for the output
> chain.
> The strange now is, that ipchains don't seem to find matching packets.
> Although pc A is looking some webpages, ipchains don't increment the
> counters i can look at with ipchains -L -v.
> Has anyone a suggestion about what i'm doing wrong here?
> Could this problem has something to do with the masquerading set up on the
> router (perhaps ipchains doesn't know, that an incoming packet is for pc A
> because the destination is the router and just after demasquerading the real
> destination address is known?)?
> Thanks for any help!
> 
> Greetings,
> Matthias
> 
> -- 
> Aufgepasst - jetzt viele 1&1 New WebHosting Pakete ohne
> Einrichtungsgebuehr + 1 Monat Grundgebuehrbefreiung!
> http://puretec.de/index.html?ac=OM.PU.PU003K00736T0492a
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
> 




Reply to: