Dan McDonald wrote:
On Tue, Aug 29, 2006 at 11:44:28AM +0800, Darren Reed wrote:
<SNIP!>
One way that I can think of to do this is to use IPFilter's (:-)
count rules with filters that somehow distinguish :0 traffic
from :1 traffic. You can reset the counters back to 0 with
a cronjob and look for inactivity at the same time.
Is that within the scope of possibility for you?
I was under the impression I could do it only for values (N,z) of ip.tunN:z
that were relatively static. I was also under the impression that the
PFHOOKS version would allow me a great deal more flexibility.
You are correct, it does work best where (N,z) are relatively
static. The change to allow you the flexibility you want
would require supporting the use of logical interface names
in IPFilter rules and I do not want to go there.
If there was a script associated with making the interface go
up/down, my suggestion would be to have that additionally
manage IPFilter rules for traffic accounting.
Darren
_______________________________________________
networking-discuss mailing list
[email protected]
