Yo, one more thing WRT accounting POP3, and just as an idea that may be useful for you in the future: if your pop3 server software changes its uid to the user served, or if you set up several independant pop3 servers running under different uids, you can use the "owner" match extension to iptables to easily seperate accounting based on the uids. You can do this inside the pop3_accounting chain, without touching the main chains again.
Isn't this nice? all the best Patrick
