Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Jul 2001 22:02:18 +0200
From:      Alexander Langer <alex@big.endian.de>
To:        freebsd-net@FreeBSD.org
Subject:   IP accounting/filtering for bigger setups
Message-ID:  <20010716220218.A7652@zerogravity.kawo2.rwth-aachen.d>

next in thread | raw e-mail | index | archive | help
Hi!

We have to account the traffic of >450 IPs and also have to deny
traffic to/from a few IPs.

We are currently using a half-baken solution with ipfw and a
config with 6 rules for each IP, which makes the stuff quite
uncomfortable.
(on high network load, "ipfw list" takes minutes, we have to check
6 rules for each IP, ...)

We are now searching for other solutions and I wondered, if one could
recommend them.

I'd prefer something, that automatically accounts the traffic
for all routed IPs (and, if possible, with some exceptions, e.g.
only traffic, that leaves a certain subnet), and can also still deny
some traffic.

Anyone has some suggestions for us?

Thanks

Alex

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010716220218.A7652>