From owner-freebsd-questions Thu Dec 7 3:29:25 2000 From owner-freebsd-questions@FreeBSD.ORG Thu Dec 7 03:29:24 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from relay1.ntu-kpi.kiev.ua (www.ntu-kpi.kiev.ua [212.111.192.161]) by hub.freebsd.org (Postfix) with ESMTP id 01BAA37B400 for ; Thu, 7 Dec 2000 03:29:23 -0800 (PST) Received: from comsys.ntu-kpi.kiev.ua (eth0.comsys.ntu-kpi.kiev.ua [10.0.1.184]) by relay1.ntu-kpi.kiev.ua (Postfix) with ESMTP id 4A4FD2FA37 for ; Thu, 7 Dec 2000 13:29:10 +0200 (EET) Received: from pm5149 (pm514-9.comsys.ntu-kpi.kiev.ua [10.18.54.109]) by comsys.ntu-kpi.kiev.ua (8.9.3/8.8.7) with SMTP id NAA61311 for ; Thu, 7 Dec 2000 13:45:37 +0200 (EET) (envelope-from simon@comsys.ntu-kpi.kiev.ua) Message-ID: <004a01c06038$9c330bc0$6d36120a@comsys.ntukpi.kiev.ua> From: "Andrey Simonenko" To: Subject: Help with IP Filter (strange problem) Date: Thu, 7 Dec 2000 13:29:41 +0300 MIME-Version: 1.0 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG My server has LL link to ISP and has only one public IP address (x.x.x.x). I try to count bytes from ISP to my interface with public IP address. 1. IP firewall rule for this: 0520 allow ip from any to x.x.x.x via ppp0 2. IP Filter accounting rule for this (I tried to use first rule and then second one, results were the same): @1 count in on ppp0 from any to any or @1 count in on ppp0 from any to x.x.x.x/32 Number of bytes on IP Filter accounting rule is more then number of bytes in IP Firewall rule in two times (I used ipfw and ipfstat command to view counters). I used the same rules for counting incoming bytes on LAN and IP Firewall and IP Filter give equal results. What did I wrong? ps: I use IP Firewall and IP Filter together, but don't think that it is problem, because on LAN results, as I expected, are correct and equal. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message