On Mon, Jun 30, 2008 at 5:42 AM, Dome Charoenyost <[EMAIL PROTECTED]> wrote:
> Dear All,
> Thailand will inplement new computer and internet LAW. All internet
> cafe and coporate should be keep traffic (packet) Log for 90 days.

Great - we're fighting with such bad ideas in germany since years.
As you might already realized below, it's a killer for small
companies to force them keep such huge amounts of data logged.

> So i make Linux Distro base on Ubuntu (Buit from debootstrap) and use
> ebox for GUI config. My distro name is "Plawan" meening is whale.
>
> I use iptables for keep packet log to syslog-ng (Postgresql DB backend)
> command is
> iptables -t nat -I PREROUTING 1 -j LOG  --log-ip-options --log-tcp-options
>
> but look like DB growth very fast.

I guess if you are doing logging at such a level, it's totally normal
to get huge amounts pf data.
Thank your goverment for this great law and buy a lot of disks.

The netfilter/iptables developers might have some ideas on how to
reduce the amount a little, or you could log into bzip files directly
instead of a database - I'd think such logging is drawing a lot of
performance for a database when  traffic is high.

Henning


-- 
Henning Sprang
http://www.sprang.de | http://lazyb0y.blogspot.com/
_______________________________________________
Ebox-user mailing list
[email protected]
https://lists.warp.es/mailman/listinfo/ebox-user

Responder a