Skip to contentSkip to conversation

Iptables + quota patch

DISCUSSION osu 1 participant 1 message Oct 16, 2008

lore
Share & tools
lore

osu

author
#0 lore raw

Hi!
We are temporary using quota patch to account out traffic.
But the reply from iptables is somewhere strange, for example, i consequently ask for current rule, and receive different --quota state, it jumps from 23964119 bytes to 28167287 and back in undefined order, however in the left column the ammount of sended bytes remains constant.

pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 23964119 -j ACCEPT
pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 28167287 -j ACCEPT
pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 28167287 -j ACCEPT
pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 28167287 -j ACCEPT
pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 23964119 -j ACCEPT
pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 28167287 -j ACCEPT
pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 23964119 -j ACCEPT
pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 28167287 -j ACCEPT
pastor@UProxy:/root/firewall$ sudo iptables-save -c | grep 130.84
[11332:7111480] -A OUTPUT -s 130.130.130.57/32 -d 130.130.130.84/32 -m quota --quota 28167287 -j ACCEPT

PS please don't pay attention to subnets and sorry for my english p.f.