forked from extern/shorewall_code
6b28b09037
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1714 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
97 lines
3.0 KiB
Plaintext
97 lines
3.0 KiB
Plaintext
#
|
|
# Shorewall version 2.1 - Accounting File
|
|
#
|
|
# /etc/shorewall/accounting
|
|
#
|
|
# Accounting rules exist simply to count packets and bytes in categories
|
|
# that you define in this file. You may display these rules and their
|
|
# packet and byte counters using the "shorewall show accounting" command.
|
|
#
|
|
# Please see http://shorewall.net/Accounting.html for examples and
|
|
# additional information about how to use this file.
|
|
#
|
|
#
|
|
# Columns are:
|
|
#
|
|
# ACTION - What to do when a match is found.
|
|
#
|
|
# COUNT - Simply count the match and continue
|
|
# with the next rule
|
|
# DONE - Count the match and don't attempt
|
|
# to match any other accounting rules
|
|
# in the chain specified in the CHAIN
|
|
# column.
|
|
# <chain>[:COUNT]
|
|
# - Where <chain> is the name of
|
|
# a chain. Shorewall will create
|
|
# the chain automatically if it
|
|
# doesn't already exist. Causes
|
|
# a jump to that chain. If :COUNT
|
|
# is including, a counting rule
|
|
# matching this record will be
|
|
# added to <chain>
|
|
#
|
|
# CHAIN - The name of a chain. If specified as "-" the
|
|
# 'accounting' chain is assumed. This is the chain
|
|
# where the accounting rule is added. The chain will
|
|
# be created if it doesn't already exist.
|
|
#
|
|
# SOURCE - Packet Source
|
|
#
|
|
# The name of an interface, an address (host or net) or
|
|
# an interface name followed by ":"
|
|
# and a host or net address.
|
|
#
|
|
# DESTINATION - Packet Destination
|
|
#
|
|
# Format the same as the SOURCE column.
|
|
#
|
|
# PROTOCOL A protocol name (from /etc/protocols), a protocol
|
|
# number, or "ipp2p"
|
|
#
|
|
# DEST PORT Destination Port number. If the PROTOCOL is "ipp2p" then
|
|
# this column must contain an ipp2p option ("iptables -m
|
|
# ipp2p --help") without the leading "--". If no option
|
|
# is given in this column, "ipp2p" is assumed.
|
|
#
|
|
# Service name from /etc/services or port number. May
|
|
# only be specified if the protocol is TCP or UDP (6
|
|
# or 17).
|
|
#
|
|
# SOURCE PORT Source Port number
|
|
#
|
|
# Service name from /etc/services or port number. May
|
|
# only be specified if the protocol is TCP or UDP (6
|
|
# or 17).
|
|
#
|
|
# USER/GROUP This column may only be non-empty if the CHAIN is
|
|
# OUTPUT.
|
|
#
|
|
# The column may contain:
|
|
#
|
|
# [!][<user name or number>][:<group name or number>]
|
|
#
|
|
# When this column is non-empty, the rule applies only
|
|
# if the program generating the output is running under
|
|
# the effective <user> and/or <group> specified (or is
|
|
# NOT running under that id if "!" is given).
|
|
#
|
|
# Examples:
|
|
#
|
|
# joe #program must be run by joe
|
|
# :kids #program must be run by a member of
|
|
# #the 'kids' group
|
|
# !:kids #program must not be run by a member
|
|
# #of the 'kids' group
|
|
#
|
|
# In all of the above columns except ACTION and CHAIN, the values "-",
|
|
# "any" and "all" may be used as wildcards
|
|
#
|
|
# Please see http://shorewall.net/Accounting.html for examples and
|
|
# additional information about how to use this file.
|
|
#
|
|
#ACTION CHAIN SOURCE DESTINATION PROTO DEST SOURCE USER/
|
|
# PORT PORT GROUP
|
|
#
|
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|