projects / people / pmueller / ipfire-2.x.git / blame
| Commit | Line | Data |
|---|---|---|
| cd1a2927 MT |
1 | # Example config file with accounting rules |
| 2 | # Install as /etc/ipac-ng/rules.conf.iptables | |
| 3 | # | |
| 4 | # Format: | |
| 5 | # Name of rule|direction|interface|protocol|source|destination | |
| 6 | # WARNING!!!! spaces are not allowed before and after '|'. | |
| 7 | # | |
| 8 | # where | |
| 9 | # Name of rule Any string to identify this rule | |
| 10 | # direction ipac~fi - forward in | |
| 11 | # ipac~fo - forward out | |
| 12 | # ipac~i - outgoing from machine with ipac-ng to other host(/net) | |
| 13 | # (or incoming to otherhost) | |
| 14 | # ipac~o - incoming to machine with ipac-ng | |
| 15 | # (or outgoing from otherhost) | |
| 16 | # | |
| 17 | # interface interface name, '+' means all interfaces (dont try to use ip numbers here!) | |
| 18 | # protocol tcp | udp | icmp | all | |
| 19 | # source \ | |
| 20 | # destination both as described in ipfwadm(8), or empty | |
| 21 | # | |
| 22 | # incoming: | |
| 23 | ||
| 24 | # lets demonstrate this by following rules. | |
| 25 | # Example 1: | |
| 26 | # there are some hosts in out net 192.168.0.0/24 | |
| 27 | # our ipac-ng host has two interfaces - eth0 connected to local net | |
| 28 | # and eth1 to internet | |
| 2d210ae2 MT |
29 | Incoming GREEN|ipac~i|green0|all||| |
| 30 | Outgoing GREEN|ipac~o|green0|all||| | |
| cd1a2927 MT |
31 | |
| 32 | Incoming RED (PPP)|ipac~i|ppp0|all||| | |
| 33 | Outgoing RED (PPP)|ipac~o|ppp0|all||| | |
| 34 | ||
| 35 | Incoming RED (ISDN PPP)|ipac~i|ippp0|all||| | |
| 36 | Outgoing RED (ISDN PPP)|ipac~o|ippp0|all||| |