-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 02/17/2017 12:17 AM, Simon Hobson wrote: > Tom Eastep <[email protected]> wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >>> The diagram is useful, but doesn't show where accounting rules >>> fit into it. >> >> It actually does. With ACCOUNTING_TABLE=mangle, all rules are in >> the mangle table. When you section the accounting file, the rules >> in each section are jumped to from the chain of the same name. > > OK, I see it now, and the note at the top of > http://shorewall.net/manpages/shorewall-accounting.html about the > introduction of the ACCOUNTING_TABLE setting. > > Just to clarify, in the prerouting and postrouting boxes, the > chains are executed top-down in the list ? So Raw, Mangle, NAT for > prerouting; and Mangle, NAT, Rawpost for postrouting ?
Correct. > > I feel some experimentation to see if (manually added) accounting > rules will work in the Rawpost chain ... > Beware that the rawpost table has been removed in recent kernels. It was used for stateless SNAT which is now done in the mangle table. - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYpzcyAAoJEJbms/JCOk0QekQP/iqUplq7wmD9OCwKK7U9+QvZ 8BpvZg+yf7y3iognEqT5QMz5PO4yvb1dJY4K/b7ZbM0R2VGnglCUo+7iI1ZH1kRC wQb1DmfvwPSk1rQrR98s8Zu8pHi4U1Uq+DKoJOxTNYZSJ2xAuM9YUVOR7kCMJwtb dGVYxHx52SCakt535yAPRjZhy0vCppURB80X7UfxzRCj3EZROKXlP8FkI5NbQedk eq9VXQfdCibj2sfMzT3wed/0QAhXP9M8LU0NA39kzEX/q8y8GPfVTv21zM9NJKq/ CvuYElq5o0puA6AfxhdXJSawkBTISyplNylSFuCsh8QHnmcM+TXx7tCj6JMQYuT2 fNh9m+D9jQ0UBkHVPdMnz9i6natyc/RVHX2d/aWb+F3DuOtQuwBNF/CGxgcurkHG Pv1Bo5yK9sAFwPnrTgjPzxfwWyIJOSC5TSqtNfaN5zjHNRWDMX2aLptciWtNDThI /cbkuVx9JQLeJ2sRKKmNXm30C9jkElatodgaIvGvHB+lfaZP9SLckJLQCQWcPBHz pzhERAzBF5b6zP+rTdWHKA7/AG6BiQyOKpoTXQ7MXst0s0l8JxFp9l/o/jlynfis G9Ul/uPosN42q0GyT8uvbqcXE6ohjtCECKa1TeK+Pw/pJ45TaxtHawoyMze5VjSA oxmBuJYdzRYZ0HUgJYyK =Lt66 -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
