Запустил ipa с конфигом
global {
update_db_time = 10s
db_dir= /var/ipa
}
rule SEVERSK {
ipfw = 1092
update_db_time = 10s
append_db_time = 10s
info = Traffic to SEVERSK
limit LIMIT {
byte_limit = 1T
startup {
exec = /sbin/ipfw del 1092 1093 1094
exec = /sbin/ipfw add 1092 count all from any to 192.168.0.1 in via gif1
exec = /sbin/ipfw add 1093 allow all from 192.168.0.1 to any via gif1
exec = /sbin/ipfw add 1094 allow all from any to 192.168.0.1 via gif1
}
shutdown {
exec = /sbin/ipfw del 1092 1093 1094
}
reach {
}
expire {
expire_time = +m
}
}
}
IPA запустилась все оки.
в ipfw sh
01092 2300 618748 count ip from any to 192.168.0.1 in via gif1
01093 3234 1011208 allow ip from 192.168.0.1 to any via gif1
01094 2299 618708 allow ip from any to 192.168.0.1 via gif1
Счетчики считают.
НО /var/ipa/SEVERSK/2004/03
01/13:27:10-13:27:20 00000000000000000000
01/13:27:20-13:27:30 00000000000000000000
01/13:27:30-13:27:40 00000000000000000000
01/13:27:40-13:27:50 00000000000000000000
01/13:27:50-13:28:00 00000000000000000000
01/13:28:00-13:28:10 00000000000000000000
01/13:28:10-13:28:20 00000000000000000000
01/13:28:20-13:28:30 00000000000000000000
01/13:28:30-13:28:40 00000000000000000000
01/13:28:40-13:28:50 00000000000000000000
Нихера понять не могу.
и в ipa.log валится такая вот хренатень
a[57131]: ------------------------------------------------
a[57131]: IPA: version 1.3.6 started by UID 0 GID 0
a[57131]: current umask is 0227
a[57131]: use configuration file /usr/local/etc/ipa.conf, parsing...
a[57131]: file /usr/local/etc/ipa.conf is readable by group and/or other users
a[57131]: loaded 1 accounting rule
a[57131]: umask is changed 0227 -> 0222
a[57131]: creating main database directory /var/ipa
a[57131]: umask is changed 0222 -> 0227
a[57131]: umask is changed 0227 -> 0222
a[57131]: creating database lock file /var/ipa/lock db
a[57131]: umask is changed 0222 -> 0227
a[57131]: creating rule directory /var/ipa/SEVERSK
a[57131]: creating directory for rule SEVERSK, limit LIMIT
a[57131]: preinit IPv4 Firewall support
a[57131]: rule SEVERSK, limit LIMIT (startup): run commands
a[57131]: make IP accounting...
a[57131]: rule SEVERSK: 1092.0 doesn't exist in IPFW kernel table
Получается она правило чтоли это найти не может?
Никто с таким не встречался? Помогите, а то уже двое суток без внешки клиенты сидят.
Вариант для распечатки
OpenNET: Виртуальная конференция (Public)
on
01-Мрт-04, 10:30 (MSK)
