=================================================================== RCS file: /home/cvsd/home/cvs/scripts/shell/firewall/fw-universal.sh,v retrieving revision 2.34 retrieving revision 2.35 diff -u -p -r2.34 -r2.35 --- scripts/shell/firewall/fw-universal.sh 2006/01/10 01:01:59 2.34 +++ scripts/shell/firewall/fw-universal.sh 2006/01/10 01:33:26 2.35 @@ -684,6 +684,16 @@ do_ip_accounting() $IPTABLES -A $IPACCT_NAME -d $client_ip done + if [ ! "x$DO_LOCAL_IP_ACCOUNTING" = "xno" ]; then + accountig_ports=`echo "$NAT_TCP_PORT_REDIRECT " | awk -v RS=' ' -v FS=: '{ print $2; }' | sort -u -r -g ` + for port in $accountig_ports; do + $IPTABLES -I INPUT -i $NAT_SUBNET_IFACE -p TCP --dport $port -j $IPACCT_NAME + $IPTABLES -I INPUT -i $NAT_SUBNET_IFACE -p UDP --dport $port -j $IPACCT_NAME + $IPTABLES -I OUTPUT -o $NAT_SUBNET_IFACE -p TCP --sport $port -j $IPACCT_NAME + $IPTABLES -I OUTPUT -o $NAT_SUBNET_IFACE -p UDP --sport $port -j $IPACCT_NAME + done + fi + $IPTABLES -A $IPACCT_NAME -s $localnet $IPTABLES -A $IPACCT_NAME -d $localnet