r1.157 of pfvar.h 21Jun
shows the addition of bidirectional counters on state entries to allow reporting with 
pfsync.

Could the same be done for the PASS/BLOCK/NAT rules?

The in/out bytes would be very helpful - as there is currently no easy way to still 
use stateful rules and report separately based on direction. This is important because 
many ISPs charge for the highest usage out of uploads/downloads (ie. not combined).


Reply via email to